Openstack-Swift: insecure use of python pickle()

OpenStack Object Storage swift before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object...

Important: Red Hat Security Advisory: openstack-swift security update

Updated openstack-swift packages that fix one security issue are now available for Red Hat OpenStack Essex. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Specially crafted Json service request allows full control over a Liferay portal instance

Specially crafted Json service request allows full control over a Liferay portal instance Description: Liferay Portal is an enterprise portal written in Java By doing a single http request you can reconfigure Liferay to use a remote Memcached cache instead of it's own cache...

memcached-info NSE Script

Retrieves information including system architecture, process ID, and server time from distributed memory object caching system memcached. Example Usage nmap -p 11211 --script memcached-info Script Output 11211/udp open unknown | memcached-info: | Process ID: 18568 | Uptime: 6950 seconds | Server...

Fedora 15 : proftpd-1.3.4-0.8.rc2.fc15 (2011-5098)

The second release candidate for proftpd 1.3.4. This includes fixes for a number of security issues : - Plaintext command injection vulnerability in FTPS implementation - Badly formed SSH messages cause DoS - Limit recursion depth for untrusted regular expressions 673040 The update also contains ...

Unprotected memcached

Memcached is a memory-based object store. As it is designed for performance, this program does not contain any security mechanism ie: authentication, meaning that anyone can connect to this server and perform queries against it. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

Security fix for the ALT Linux 5 package memcached version 1.4.5-alt1.M50P.1

Nov. 12, 2010 Andrey Cherepanov 1.4.5-alt1.M50P.1 - backport to p5 fixed CVE-2010-1152...

Security fix for the ALT Linux 5 package memcached version 1.4.5-alt1

Oct. 6, 2010 Vitaly Kuznetsov 1.4.5-alt1 - 1.4.5 ALT 23996 - CVE-2010-1152...

Security fix for the ALT Linux 8 package memcached version 1.4.5-alt1

Oct. 6, 2010 Vitaly Kuznetsov 1.4.5-alt1 - 1.4.5 ALT 23996 - CVE-2010-1152...

openSUSE Security Update : memcached (openSUSE-SU-2010:0303-1)

Remote attackers that are allowed to connect to memcached could crash memcached by sending invalid input CVE-2010-1152. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update memcached-2271. The text...

openSUSE Security Update : memcached (openSUSE-SU-2010:0303-1)

Remote attackers that are allowed to connect to memcached could crash memcached by sending invalid input CVE-2010-1152. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update memcached-2271. The text...

openSUSE Security Update : memcached (openSUSE-SU-2010:0303-1)

Remote attackers that are allowed to connect to memcached could crash memcached by sending invalid input CVE-2010-1152. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update memcached-2271. The text...

memcached 1.4.2 - Memory Consumption Remote Denial of Service

memcached 1.4.2 - Memory Consumption Remote Denial of Service source: https://www.securityfocus.com/bid/39577/info memcached is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the application to allocate large amount of memory, hanging or crashing th...

memcached 1.4.2 - Memory Consumption Remote Denial of Service

source: https://www.securityfocus.com/bid/39577/info memcached is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the application to allocate large amount of memory, hanging or crashing the application. memcached versions prior to 1.4.3 are affected...

Memcached < 1.4.3 DoS Vulnerability

Memcached is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:memcached:memcached"...

Memcached Denial of service vulnerability

The host is running Memcached and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodmemcacheddosvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Memcached Denial of service vulnerability Authors: Sooraj KS Copyright: Copyright c 2010 SecPod, http://www.secpod.com This...

Memcached < 1.4.3 No Newline Memory Consumption DoS

Binary data 5514.prm...

memcached No Newline Memory Consumption DoS

The version of memcached on the remote host has a denial of service vulnerability. When processing a client request, the service continually reads in new data, reallocating its input buffer until a newline character is received. This could result in excessive memory consumption. A remote attacker...

Design/Logic Flaw

memcached.c in memcached before 1.4.3 allows remote attackers to cause a denial of service daemon hang or crash via a long line that triggers excessive memory allocation. NOTE: some of these details are obtained from third party information...

CVE-2010-1152

memcached.c in memcached before 1.4.3 allows remote attackers to cause a denial of service daemon hang or crash via a long line that triggers excessive memory allocation. NOTE: some of these details are obtained from third party information...