CVE-2009-5023 describes a local file write vulnerability in Fail2ban versions prior to 0.8.5. Specifically, the dshield.conf, mail-buffered.conf, mynetwatchman.conf, and mynetwatchman.conf actions within action.d/ are susceptible to a symlink attack on predictably named temporary files, such as /tmp/fail2ban-mail.txt, allowing local users to write to arbitrary files. This vulnerability has a CVSS score of 4.7, indicating a medium severity. It requires local access (AV:L) and medium attack complexity (AC:M), with no authentication needed (Au:N). The potential impact is a complete loss of integrity (I:C) due to arbitrary file writing, though confidentiality and availability are not directly affected. There is no evidence of active exploitation for CVE-2009-5023, and no exploit code is publicly available on platforms like Metasploit or ExploitDB. Community discussion and media coverage are minimal, suggesting a low level of attention to this particular vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 0.8.4CPE matchmatch criteria | cpe:2.3:a:fail2ban:fail2ban:*:*:*:*:*:*:*:* | ||
0.1.0CPE matchmatch criteria | cpe:2.3:a:fail2ban:fail2ban:0.1.0:*:*:*:*:*:*:* | ||
0.1.1CPE matchmatch criteria | cpe:2.3:a:fail2ban:fail2ban:0.1.1:*:*:*:*:*:*:* | ||
0.1.2CPE matchmatch criteria | cpe:2.3:a:fail2ban:fail2ban:0.1.2:*:*:*:*:*:*:* | ||
0.3.0CPE matchmatch criteria | cpe:2.3:a:fail2ban:fail2ban:0.3.0:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:M/Au:N/C:N/I:C/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.