search

kerberos-io / kios

A Linux OS created by Buildroot which runs Kerberos Open Source out-of-the-box.
https://www.kerberos.io
Other
196 stars 38 forks source link

security issue: memcached is listening on all interfaces by default #6

Open EmPeWe opened 7 years ago

EmPeWe commented 7 years ago

According to https://github.com/memcached/memcached/wiki/ConfiguringServer the recommendation is: "...you must not expose memcached directly to the internet..."

It would be a better approach to start the daemon with -l 127.0.0.1 or even better using unix sockets (-s ), which is supported in php-memcached since version 2.0.0b1

cedricve commented 7 years ago

thanks for the comment, we will integrate this in the next release.

natefanaro commented 4 years ago

Is this still an issue? I have not tried this yet but according to the init script of memcached this wasn't resolved https://github.com/kerberos-io/kios/blob/master/board/common/overlay/etc/init.d/S63memcached#L4

Will this be fixed? I am trying to evaluate if I want to use this software. I generally trust the devices on my network and know not to expose this to the public internet. Still, seeing an open security issue this old is a concern.