medium4.8
CVE-2013-7239
memcached before 1.4.17 allows remote attackers to bypass authentication by sending an invalid request with SASL credentials, then sending another request with…
Impact
memcached before 1.4.17 allows remote attackers to bypass authentication by sending an invalid request with SASL credentials, then sending another request with incorrect SASL credentials.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Memcached | Memcached | through 1.4.16 Versions 1.4.0, 1.4.1, 1.4.2, 1.4.3, 1.4.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/oss-sec/2013/q4/572
- http://secunia.com/advisories/56183
- http://www.debian.org/security/2014/dsa-2832
- http://www.securityfocus.com/bid/64559
- http://www.ubuntu.com/usn/USN-2080-1
- https://code.google.com/p/memcached/wiki/ReleaseNotes1417
- http://seclists.org/oss-sec/2013/q4/572
- http://secunia.com/advisories/56183
- http://www.debian.org/security/2014/dsa-2832
- http://www.securityfocus.com/bid/64559
- http://www.ubuntu.com/usn/USN-2080-1
- https://code.google.com/p/memcached/wiki/ReleaseNotes1417