CVE-2012-2945 Hadoop symlink vulnerability
HighCVSS 7.5
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Hadoop 1.0.3 contains a symlink vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.apache.hadoop/hadoop-main(Maven) | <= 1.0.3 | No fix listed |
| org.apache.hadoop/hadoop-main(Maven) | < 1.0.4 | 1.0.4 |
| org.apache.hadoop/hadoop-main(Maven) | = 0.23.1 | No fix listed |
| org.apache.hadoop/hadoop-main(Maven) | = 0.23.10 | No fix listed |
| org.apache.hadoop/hadoop-main(Maven) | = 0.23.11 | No fix listed |
| org.apache.hadoop/hadoop-main(Maven) | = 0.23.3 | No fix listed |
| org.apache.hadoop/hadoop-main(Maven) | = 0.23.4 | No fix listed |
| org.apache.hadoop/hadoop-main(Maven) | = 0.23.5 | No fix listed |
| org.apache.hadoop/hadoop-main(Maven) | = 0.23.6 | No fix listed |
| org.apache.hadoop/hadoop-main(Maven) | = 0.23.7 | No fix listed |
| org.apache.hadoop/hadoop-main(Maven) | = 0.23.8 | No fix listed |
| org.apache.hadoop/hadoop-main(Maven) | = 0.23.9 | No fix listed |
| apache hadoop | = 1.0.3 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- seclists.org exploit mailing-list third-party-advisory
- security-tracker.debian.org third-party-advisory
- bugs.debian.org
- github.com
- github.com product