CVE-2013-7239

UNKNOWN

memcached before 1

Published Jan 13, 2014

Modified 1 years ago

Details

memcached before 1.4.17 allows remote attackers to bypass authentication by sending an invalid request with SASL credentials, then sending another request with incorrect SASL credentials.

References

WEB

http://seclists.org/oss-sec/2013/q4/572

ADVISORY

http://secunia.com/advisories/56183

ADVISORY

http://www.debian.org/security/2014/dsa-2832

WEB

http://www.securityfocus.com/bid/64559

ADVISORY

http://www.ubuntu.com/usn/USN-2080-1

WEB

https://code.google.com/p/memcached/wiki/ReleaseNotes1417

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2013-7239

CVSS Analysis

CVSS v2.0

4.8

Exploitability

Access Vector

Adjacent NetworkAV:A

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

PartialC:P

Integrity

PartialI:P

Availability

NoneA:N

4.8/AV:A/AC:L/Au:N/C:P/I:P/A:N

Ecosystems

Timeline

PublishedJan 13, 2014

ModifiedAug 6, 2024

CVE-2013-7239 | Mondoo Vulnerability Intelligence