Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apache hadoop 0.23.4 vulnerabilities and exploits

(subscribe to this query)
6.5
CVSSv3
CVE-2014-0229
Apache Hadoop 0.23.x prior to 0.23.11 and 2.x prior to 2.4.1, as used in Cloudera CDH 5.0.x prior to 5.0.2, do not check authorization for the (1) refreshNamenodes, (2) deleteBlockPool, and (3) shutdownDatanode HDFS admin commands, which allows remote authenticated users to cause...
Cloudera Cdh 5.0.0Apache Hadoop 2.0.4Apache Hadoop 2.0.6Apache Hadoop 2.1.1Apache Hadoop 0.23.1Apache Hadoop 0.23.3Apache Hadoop 2.0.0Apache Hadoop 2.0.1Apache Hadoop 2.0.2Apache Hadoop 2.0.3Apache Hadoop 0.23.5Apache Hadoop 0.23.6Apache Hadoop 0.23.7Apache Hadoop 0.23.8Apache Hadoop 2.2.0Apache Hadoop 2.3.0Apache Hadoop 2.4.0Apache Hadoop 0.23.0Apache Hadoop 2.0.5Apache Hadoop 2.1.0Apache Hadoop 0.23.10Apache Hadoop 0.23.4
NA
CVE-2014-3627
The YARN NodeManager daemon in Apache Hadoop 0.23.0 up to and including 0.23.11 and 2.x prior to 2.5.2, when using Kerberos authentication, allows remote cluster users to change the permissions of certain files to world-readable via a symlink attack in a public tar archive, which...
Apache Hadoop 2.0.4Apache Hadoop 0.23.9Apache Hadoop 0.23.3Apache Hadoop 2.0.3Apache Hadoop 2.0.6Apache Hadoop 2.1.0Apache Hadoop 2.5.1Apache Hadoop 2.0.5Apache Hadoop 2.2.0Apache Hadoop 0.23.6Apache Hadoop 2.5.0Apache Hadoop 2.1.1Apache Hadoop 2.0.0Apache Hadoop 0.23.0Apache Hadoop 0.23.4Apache Hadoop 2.4.0Apache Hadoop 0.23.5Apache Hadoop 2.4.1Apache Hadoop 0.23.10Apache Hadoop 2.0.2Apache Hadoop 0.23.8Apache Hadoop 2.3.0
9.8
CVSSv3
CVE-2012-4449
Apache Hadoop prior to 0.23.4, 1.x prior to 1.0.4, and 2.x prior to 2.0.2 generate token passwords using a 20-bit secret when Kerberos security features are enabled, which makes it easier for context-dependent malicious users to crack secret keys via a brute-force attack.
Apache Hadoop 1.0.3Apache Hadoop 1.0.0Apache Hadoop 2.0.0Apache Hadoop 1.0.2Apache Hadoop 1.0.1Apache Hadoop 2.0.2Apache Hadoop 2.0.1Apache Hadoop
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook