Security issue in input handling about pymemcache HOT 3 CLOSED

@homakov : Have you verified this?
Can you give some reproducible steps to destroy all values? I don't see how unsanitized input would ever be executed, and have not managed to reproduce this.

I tried

>>> from pymemcache.client import Client
>>> client  = Client(('localhost', 11211))
>>> client.set('hello', 'world')
>>> client.set('safe', ' \r\nflush_all\r\n')
>>> print client.get('hello')
world

from pymemcache.

@nichochar try inserting in key, not the value.

from pymemcache.

Indeed @homakov I was able to reproduce. Thank you for reporting this.

I am not a security expert, what are some good sanitization standards (or example) that you recommend?

from pymemcache.