CoreCVE
Back

HIGH

DataNodes in Apache Hadoop 2.0.0 alpha does not check the BlockTokens of clients when Kerberos is enabled and the DataNode has checked out the same BlockPool twice from a NodeName, which might allow remote clients to read arbitrary blocks, write to blocks to which they only have read access, and have other unspecified impacts

Published Jul 12, 2012

Description

DataNodes in Apache Hadoop 2.0.0 alpha does not check the BlockTokens of clients when Kerberos is enabled and the DataNode has checked out the same BlockPool twice from a NodeName, which might allow remote clients to read arbitrary blocks, write to blocks to which they only have read access, and have other unspecified impacts.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-310

References (6)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Jul 12, 2012
Updated Aug 6, 2024
Reserved Jun 14, 2012
Link CVE-2012-3376
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 16, 2026
Link CVE-2012-3376
Red Hat
Severity n/a
Public date n/a
Links CVE-2012-3376
GHSA-QMH2-H7R6-GM6Q