NVD

Id
48542  
Name
CVE-2009-1255  
Description
The process_stat function in (1) Memcached before 1.2.8 and (2) MemcacheDB 1.2.0 discloses (a) the contents of /proc/self/maps in response to a stats maps command and (b) memory-allocation statistics in response to a stats malloc command, which allows remote attackers to obtain sensitive information such as the locations of memory regions, and defeat ASLR protection, by sending a command to the daemon"s TCP port.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-04-30  
Modified Date
2009-06-09  
Seq
2009-1255  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
244755 48542 CVE-2009-1255 20090428 Positron Security Advisory #2009-001: Memcached and MemcacheDB ASLR Bypass Weakness  View
244756 48542 CVE-2009-1255 http://code.google.com/p/memcachedb/source/browse/trunk/ChangeLog?spec=svn98&r=98  View
244757 48542 CVE-2009-1255 http://code.google.com/p/memcachedb/source/detail?r=98  View
244758 48542 CVE-2009-1255 http://code.google.com/p/memcachedb/source/diff?spec=svn98&r=98&format=side&path=/trunk/memcachedb.c  View
244759 48542 CVE-2009-1255 http://groups.google.com/group/memcached/browse_thread/thread/ff96a9b88fb5d40e  View
244760 48542 CVE-2009-1255 MDVSA-2009:105  View
244761 48542 CVE-2009-1255 http://www.positronsecurity.com/advisories/2009-001.html  View
244762 48542 CVE-2009-1255 20090428 Positron Security Advisory #2009-001: Memcached and MemcacheDB ASLR Bypass Weakness  View
244763 48542 CVE-2009-1255 34756  View
244764 48542 CVE-2009-1255 1022140  View
244765 48542 CVE-2009-1255 ADV-2009-1196  View
244766 48542 CVE-2009-1255 ADV-2009-1197  View
244767 48542 CVE-2009-1255 memcachedb-procselfmaps-info-disclosure(50221)  View
244768 48542 CVE-2009-1255 FEDORA-2009-4199  View
244769 48542 CVE-2009-1255 FEDORA-2009-4542  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43549 JVNDB-2009-004556 Memcached などの製品で使用される process_stat 関数における重要な情報を取得される脆弱性 (1) Memcached および (2) MemcacheDB の process_stat 関数は、(a) stats maps コマンドへのレスポンス内の /proc/self/maps のコンテンツ、および (b) stats malloc コマンドへのレスポンス内のメモリ割り当て統計を公開するため、メモリ領域の場所といった重要な情報を取得される、および ASLR 保護を無効化される脆弱性が存在します。 CVE-2009-1255 38686 CVE-2009-1255 48542 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004556.html 2009-04-11 2012-09-25 View