2021-03-09 11:23:40 +00:00
|
|
|
id: memcached-stats
|
|
|
|
|
|
|
|
|
|
info:
|
|
|
|
|
name: Memcached stats disclosure
|
2021-04-06 06:46:11 +00:00
|
|
|
author: pdteam
|
2021-03-09 11:23:40 +00:00
|
|
|
severity: low
|
2023-07-24 18:27:05 +00:00
|
|
|
tags: network,memcached,misconfig
|
2022-08-16 16:24:27 +00:00
|
|
|
description: |
|
|
|
|
|
Memcached stats is used to return server statistics such as PID, version, connections, etc.
|
2023-04-28 08:11:21 +00:00
|
|
|
metadata:
|
|
|
|
|
max-request: 2
|
2021-03-09 11:23:40 +00:00
|
|
|
|
2023-04-27 04:28:59 +00:00
|
|
|
tcp:
|
2021-03-09 11:23:40 +00:00
|
|
|
- inputs:
|
|
|
|
|
- data: "stats\r\n\r\nquit\r\n"
|
|
|
|
|
|
|
|
|
|
host:
|
2021-03-25 14:52:41 +00:00
|
|
|
- "{{Hostname}}"
|
2023-09-16 19:35:21 +00:00
|
|
|
port: 11211
|
2021-03-09 11:23:40 +00:00
|
|
|
read-size: 2048
|
|
|
|
|
|
|
|
|
|
matchers:
|
|
|
|
|
- type: word
|
|
|
|
|
words:
|
2022-08-16 16:24:27 +00:00
|
|
|
- "STAT "
|
