Lucene search

K
freebsdFreeBSD86ADA694-8B30-11DE-B9D0-000C6E274733
HistoryApr 29, 2009 - 12:00 a.m.

memcached -- memcached stats maps Information Disclosure Weakness

2009-04-2900:00:00
vuxml.freebsd.org
17

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.008 Low

EPSS

Percentile

81.8%

Secunia reports:

A weakness has been reported in memcached, which can be exploited
by malicious people to disclose system information.
The weakness is caused due to the application disclosing the
content of /proc/self/maps if a stats maps command is received.
This can be exploited to disclose e.g. the addresses of allocated
memory regions.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchmemcached< 1.2.8UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.008 Low

EPSS

Percentile

81.8%