Apache : Security Vulnerabilities, CVEs, Published In April 2012
The Kerberos/MapReduce security functionality in Apache Hadoop 0.20.203.0 through 0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2, as used in Cloudera CDH CDH3u0 through CDH3u2, Cloudera hadoop-0.20-sbin before 0.20.2+923.197, and other products, allows remote authenticated users to impersonate arbitrary cluster user accounts via unspecified vectors.
Max CVSS
6.5
EPSS Score
0.21%
Published
2012-04-12
Updated
2017-03-24
envvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse DSO in the current working directory during execution of apachectl.
Max CVSS
6.9
EPSS Score
0.04%
Published
2012-04-18
Updated
2022-09-14
2 vulnerabilities found