CVE-2009-1255

Related Files

Mandriva Linux Security Advisory 2009-105

Posted May 5, 2009

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2009-105 - The process_stat function in Memcached prior 1.2.8 discloses memory-allocation statistics in response to a stats malloc command, which allows remote attackers to obtain potentially sensitive information by sending a command to the daemon's TCP port. The updated packages have been patched to prevent this.

tags | advisory, remote, tcp

systems | linux, mandriva

advisories | CVE-2009-1255, CVE-2009-1494

SHA-256 | 234a80a38489861d68a02790cb0a9b505a37001ba30edca59da0fa46baaf0797

Download | Favorite | View

Memcached ASLR Bypass Weakness

Posted Apr 28, 2009

Site positronsecurity.com

During an audit of the memcached v1.2.7 source code, it was found that the software divulges its stack, heap, and shared library memory locations. This effectively disables address space layout randomization (ASLR) protection, making potential buffer overflow vulnerabilities much easier to exploit.

tags | advisory, overflow, vulnerability, bypass

advisories | CVE-2009-1255

SHA-256 | 2f8e3cddb4d091a7628c65e9dcd58f8e254af82611e835a326c48824dc2d5d55

Download | Favorite | View