CVE-2012-2945

Description

Hadoop 1.0.3 contains a symlink vulnerability as a result of storing pid files in the shared `/tmp` directory by default.

Affected packages (1)

• Maven/org.apache.hadoop:hadoop-mainfrom 0, < 1.0.4

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2012-2945
• PATCHhttps://github.com/apache/hadoop
• WEBhttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=535861
• WEBhttps://seclists.org/fulldisclosure/2012/Jul/3
• WEBhttps://security-tracker.debian.org/tracker/CVE-2012-2945