Launchpad.net

CVE 2013-7239

memcached before 1.4.17 allows remote attackers to bypass authentication by sending an invalid request with SASL credentials, then sending another request with incorrect SASL credentials.

See the CVE page on Mitre.org for more details.