Lucene search
Ubuntu.comUB:CVE-2013-7239HistoryJan 01, 2014 - 12:00 a.m.
CVE-2013-7239
2014-01-0100:00:00
ubuntu.com
ubuntu.com
17
CVSS2
4.8
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:A/AC:L/Au:N/C:P/I:P/A:N
EPSS
0.016
Percentile
87.3%
memcached before 1.4.17 allows remote attackers to bypass authentication by
sending an invalid request with SASL credentials, then sending another
request with incorrect SASL credentials.
Bugs
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=733643>
- <https://code.google.com/p/memcached/issues/detail?id=316>
Notes
| Author | Note |
|---|---|
| mdeslaur | precise isn’t built with sasl support |
Related
debiancve
debiancve
CVE-2013-7239
2014-01-13 21:55:05
cve
cve
CVE-2013-7239
2014-01-13 21:55:05
cvelist
cvelist
CVE-2013-7239
2014-01-13 21:00:00
nvd
nvd
CVE-2013-7239
2014-01-13 21:55:05
nessus
nessus
memcached SASL Authentication Security Bypass
2014-01-30 00:00:00
Ubuntu 12.04 LTS / 12.10 / 13.04 / 13.10 : memcached vulnerabilities (USN-2080-1)
2014-01-14 00:00:00
Debian DSA-2832-1 : memcached - several vulnerabilities
2014-01-02 00:00:00
prion
prion
Authentication flaw
2014-01-13 21:55:00
openvas
openvas
Debian Security Advisory DSA 2832-1 (memcached - several vulnerabilities)
2014-01-01 00:00:00
Ubuntu Update for memcached USN-2080-1
2014-01-20 00:00:00
Debian: Security Advisory (DSA-2832-1)
2013-12-31 00:00:00
debian
debian
[SECURITY] [DSA 2832-1] memcached security update
2014-01-01 11:17:45
[SECURITY] [DSA 2832-1] memcached security update
2014-01-01 11:17:45
securityvulns
securityvulns
[SECURITY] [DSA 2832-1] memcached security update
2014-01-08 00:00:00
[ MDVSA-2014:010 ] memcached
2014-01-29 00:00:00
memcached multiple security vulnerabilities
2014-01-29 00:00:00
osv
osv
memcached - several
2014-01-01 00:00:00
memcached-1.4.33-1.1 on GA media
2024-06-15 00:00:00
ubuntu
ubuntu
Memcached vulnerabilities
2014-01-13 00:00:00
oraclelinux
oraclelinux
memcached security update
2016-11-23 00:00:00
mageia
mageia
Updated memcached package fixes multiple security vulnerabilities
2014-01-21 20:14:47
gentoo
gentoo
memcached: Multiple vulnerabilities
2014-06-15 00:00:00
suse
suse
Security update for memcached (important)
2018-03-22 17:27:53
Security update for memcached (important)
2018-03-26 15:09:40
CVSS2
4.8
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:A/AC:L/Au:N/C:P/I:P/A:N
EPSS
0.016
Percentile
87.3%
Related for UB:CVE-2013-7239