New Active Exploit: memcached on port 11211 UDP & TCP being exploited for reflection attacks

Thu Mar 1 22:38:05 UTC 2018

> this is sort of why openbsd listens only on 127.0.0.1/::1 by default,
> right? it's the only sane choice for 'fresh out of the box' network
> daemons: "Yes, it's running, yes I can healthcheck it locally to prove
> it's running"

amidst all the hysterical pontification, i am having trouble finding any
release which has, by default, a port 11211 listener on any interface.

randy