Exploitation Summary
EIP tracks 1 public exploit for CVE-2013-6890. PoCs published by Helmut Grohne.
AI-analyzed exploit summary This exploit leverages a vulnerability in DenyHosts where a specially crafted SSH login attempt can trigger a denial-of-service by causing arbitrary IP addresses to be blocked. The PoC demonstrates this by using an invalid username formatted to manipulate DenyHosts' parsing logic.
Description
denyhosts 2.6 uses an incorrect regular expression when analyzing authentication logs, which allows remote attackers to cause a denial of service (incorrect block of IP addresses) via crafted login names.
Exploits (1)
This exploit leverages a vulnerability in DenyHosts where a specially crafted SSH login attempt can trigger a denial-of-service by causing arbitrary IP addresses to be blocked. The PoC demonstrates this by using an invalid username formatted to manipulate DenyHosts' parsing logic.