1785 matches found
53kf大量Memcached未授权访问
简要描述： 53kf大量memcached 未授权访问，泄露敏感信息 详细说明： 100多个地址，大量未授权访问，泄露敏感信息 漏洞证明： passport.53kf.com vip.53kf.com blog.53kf.com cx.53kf.com s.53kf.com v6.53kf.com zz.53kf.com 1.53kf.com 8.53kf.com t7.53kf.com t6.53kf.com t3.53kf.com t2.53kf.com t5.53kf.com t4.53kf.com t9.53kf.com t8.53kf.com t1.53kf.com...
Oracle Solaris Third-Party Patch Update : memcached (cve_2013_0179_buffer_errors)
The remote Solaris system is missing necessary patches to address security updates : - The processbindelete function in memcached.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service segmentation fault via a...
Oracle Solaris Third-Party Patch Update : memcached (multiple_vulnerabilities_in_memcached)
The remote Solaris system is missing necessary patches to address security updates : - The processbindelete function in memcached.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service segmentation fault via a...
Memcached Extractor
This module extracts the slabs from a memcached instance. It then finds the keys and values stored in those slabs. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Memcached Extractor',...
Amazon Linux AMI : php-ZendFramework (ALAS-2014-460)
The 1 ZendLdap class in Zend before 1.12.9 and 2 Zend\Ldap component in Zend 2.x before 2.2.8 and 2.3.x before 2.3.3 allows remote attackers to bypass authentication via a password starting with a null byte, which triggers an unauthenticated bind. CVE-2014-8088 The 1.12.9, 2.2.8, and 2.3.3 releas...
CVE-2014-8124
OpenStack Dashboard Horizon before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests to the login page...
CVE-2014-8731 - RCE in phpMemcachedAdmin <=1.2.2
CVE-2014-8731 CVSSv2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:F/RL:U/RC:C CVSSv2 Base Score=10.0 CVSSv2 Temp Score=9.5 OWASP Top 10 classification: A1 - Injection PHPMemcachedAdmin is a web-based frontend for Linux's memcached Daemon. Project Homepage: https://code.google.com/p/phpmemcacheadmin/...
PHPMemcachedAdmin 1.2.2 Remote Code Execution Vulnerability
PHPMemcachedAdmin versions 1.2.2 and below suffer from a remote code execution vulnerability. CVE-2014-8731 CVSSv2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:F/RL:U/RC:C CVSSv2 Base Score=10.0 CVSSv2 Temp Score=9.5 OWASP Top 10 classification: A1 - Injection PHPMemcachedAdmin is a web-based frontend fo...
CVE-2014-6474
Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:MEMCACHED...
Design/Logic Flaw
Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:MEMCACHED...
UBUNTU-CVE-2014-6474
Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:MEMCACHED...
CVE-2014-6474
Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:MEMCACHED...
CVE-2014-6474
The CVE-2014-6474 entry concerns Oracle MySQL Server 5.6.19 and earlier. It is described as an unspecified vulnerability that remote authenticated users can exploit to affect availability via vectors related to SERVER:MEMCACHED. The NVD metadata shows a base score of 3.5 (LOW) with CVSS2 metrics:...
CVE-2014-6474
Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:MEMCACHED...
PT-2014-7240 · Oracle +2 · Mysql Server +2
Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.6.19 and earlier Description: The issue allows remote authenticated users to affect availability through vectors related to SERVER:MEMCACHED. This means that authenticated users can potentially impact the system...
openSUSE Security Update : memcached (openSUSE-SU-2014:0867-1)
memcached was updated to version 1.4.20 to fix five security issues. These security issues were fixed : - DoS when printing out keys to be deleted in verbose mode CVE-2013-0179 - Remote DoS crash via a request that triggers 'unbounded key print' CVE-2013-7291 - Remote DoS segmentation fault via a...
memcached 1.4.2 Memory Consumption Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/39577/info memcached is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the application to allocate large amount of memory, hanging or crashing the application. memcached...
GLSA-201406-13 : memcached: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201406-13 memcached: Multiple vulnerabilities memcached authentication could be bypassed when using SASL due to a flaw related to SASL authentication state. Also several heap-based buffer overflows due to integer conversions when...
memcached: Multiple vulnerabilities
Background memcached is a high-performance, distributed memory object caching system Description memcached authentication could be bypassed when using SASL due to a flaw related to SASL authentication state. Also several heap-based buffer overflows due to integer conversions when parsing certain...
Moderate: Red Hat Security Advisory: openstack-keystone security and bug fix update
Updated openstack-keystone packages that fix one security issue and various bugs are now available for Red Hat Enterprise Linux OpenStack Platform 4.0. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base scor...