From 26e6464db9eac7030c2d0814cbad36520893c432 Mon Sep 17 00:00:00 2001 From: Marcus Alves Grando Date: Mon, 17 Aug 2009 13:26:56 +0000 Subject: [PATCH] - memcached -- memcached stats maps Information Disclosure Weakness PR: 134206 Submitted by: Mark Foster --- security/vuxml/vuln.xml | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 5be950a27175..5b0d3b0e402c 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,37 @@ Note: Please add new entries to the beginning of this file. --> + + memcached -- memcached stats maps Information Disclosure Weakness + + + memcached + 1.2.8 + + + + +

Secunia reports:

+
+

A weakness has been reported in memcached, which can be exploited + by malicious people to disclose system information.

+

The weakness is caused due to the application disclosing the + content of /proc/self/maps if a stats maps command is received. + This can be exploited to disclose e.g. the addresses of allocated + memory regions.

+
+ + + + CVE-2009-1255 + http://secunia.com/advisories/34915/ + + + 2009-04-29 + 2009-08-17 + + + wordpress -- remote admin password reset vulnerability