Lucene search
Ubuntu.comUB:CVE-2013-7239HistoryJan 01, 2014 - 12:00 a.m.
CVE-2013-7239
2014-01-0100:00:00
ubuntu.com
ubuntu.com
12
4.8 Medium
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:A/AC:L/Au:N/C:P/I:P/A:N
0.016 Low
EPSS
Percentile
87.0%
memcached before 1.4.17 allows remote attackers to bypass authentication by
sending an invalid request with SASL credentials, then sending another
request with incorrect SASL credentials.
Bugs
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=733643>
- <https://code.google.com/p/memcached/issues/detail?id=316>
Notes
| Author | Note |
|---|---|
| mdeslaur | precise isn’t built with sasl support |
Related
debiancve
debiancve
CVE-2013-7239
2014-01-13 21:55:00
cve
cve
CVE-2013-7239
2014-01-13 21:55:00
prion
prion
Authentication flaw
2014-01-13 21:55:00
nessus
nessus
memcached SASL Authentication Security Bypass
2014-01-30 00:00:00
Ubuntu 12.04 LTS / 12.10 / 13.04 / 13.10 : memcached vulnerabilities (USN-2080-1)
2014-01-14 00:00:00
memcached < 1.4.17 Multiple Vulnerabilities
2014-01-30 00:00:00
openvas
openvas
Ubuntu Update for memcached USN-2080-1
2014-01-20 00:00:00
Debian Security Advisory DSA 2832-1 (memcached - several vulnerabilities)
2014-01-01 00:00:00
Debian Security Advisory DSA 2832-1 (memcached - several vulnerabilities)
2014-01-01 00:00:00
ubuntu
ubuntu
Memcached vulnerabilities
2014-01-13 00:00:00
osv
osv
memcached - several
2014-01-01 00:00:00
debian
debian
[SECURITY] [DSA 2832-1] memcached security update
2014-01-01 11:17:45
[SECURITY] [DSA 2832-1] memcached security update
2014-01-01 11:17:45
securityvulns
securityvulns
[SECURITY] [DSA 2832-1] memcached security update
2014-01-08 00:00:00
[ MDVSA-2014:010 ] memcached
2014-01-29 00:00:00
memcached multiple security vulnerabilities
2014-01-29 00:00:00
oraclelinux
oraclelinux
memcached security update
2016-11-23 00:00:00
mageia
mageia
Updated memcached package fixes multiple security vulnerabilities
2014-01-21 20:14:47
gentoo
gentoo
memcached: Multiple vulnerabilities
2014-06-15 00:00:00
suse
suse
Security update for memcached (important)
2018-03-26 15:09:40
Security update for memcached (important)
2018-03-22 17:27:53
4.8 Medium
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:A/AC:L/Au:N/C:P/I:P/A:N
0.016 Low
EPSS
Percentile
87.0%
Related for UB:CVE-2013-7239