CVE-2006-6301

CVE-2006-6301 describes a denial-of-service vulnerability in DenyHosts version 2.5. The flaw stems from improper parsing of sshd log files, allowing remote attackers to inject arbitrary IP addresses into /etc/hosts.deny. This can be achieved by logging in via SSH with a specially crafted username containing an IP address, which is then incorrectly processed by DenyHosts' regular expressions. The vulnerability has a CVSS score of 5.0, indicating a medium severity. It is easily exploitable over the network without authentication, leading to a denial of service by blocking legitimate users. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.