747 matches found
RUSTSEC-2016-0006 `cassandra` crate is unmaintained; use `cassandra-cpp` instead
The cassandra crate has not seen a release since December 2016, and its author is unresponsive. The cassandra-cpp crate is a maintained fork: https://github.com/Metaswitch/cassandra-rs...
Important: Red Hat Security Advisory: Red Hat JBoss Operations Network 3.3.4 update
Red Hat JBoss Operations Network 3.3 update 4, which fixes one security issue and several bugs, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives...
Cassandra: remote code execution via unauthenticated JMX/RMI interface
It was found that Apache Cassandra bound an unauthenticated JMX/RMI interface to all network interfaces. A remote attacker able to access the RMI, an API for the transport and remote execution of serialized Java, could use this flaw to execute arbitrary code as the user running Cassandra...
FreeBSD : cassandra -- remote execution of arbitrary code (607f4d44-0158-11e5-8fda-002590263bf5)
Jake Luciani reports : Under its default configuration, Cassandra binds an unauthenticated JMX/RMI interface to all network interfaces. As RMI is an API for the transport and remote execution of serialized Java, anyone with access to this interface can execute arbitrary code as the running user...
[SECURITY ANNOUNCEMENT] CVE-2015-0225
CVE-2015-0225: Apache Cassandra remote execution of arbitrary code Severity: Important Vendor: The Apache Software Foundation Versions Affected: Cassandra 1.2.0 to 1.2.19 Cassandra 2.0.0 to 2.0.13 Cassandra 2.1.0 to 2.1.3 Description: Under its default configuration, Cassandra binds an...
CVE-2015-0225
The default configuration in Apache Cassandra 1.2.0 through 1.2.19, 2.0.0 through 2.0.13, and 2.1.0 through 2.1.3 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request...
Default configuration
The default configuration in Apache Cassandra 1.2.0 through 1.2.19, 2.0.0 through 2.0.13, and 2.1.0 through 2.1.3 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request...
CVE-2015-0225
CVE-2015-0225 affects Apache Cassandra 1.2.0–1.2.19, 2.0.0–2.0.13, and 2.1.0–2.1.3, where an unauthenticated JMX/RMI interface bound to all network interfaces allows remote attackers to execute arbitrary Java code via RMI. The connected advisories indicate this is a regression path tracked in lat...
CVE-2015-0225
The default configuration in Apache Cassandra 1.2.0 through 1.2.19, 2.0.0 through 2.0.13, and 2.1.0 through 2.1.3 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request...
Apache Cassandra Remote Arbitrary Code Execution Vulnerability
Apache Cassandra is an open source distributed database management system developed by Facebook for storing exceptionally large data. Cassandra's default configuration binds unauthenticated JMX/RMI interfaces to all network interfaces. Since RMI is the API for transporting and remotely executing...
cassandra -- remote execution of arbitrary code
Jake Luciani reports: Under its default configuration, Cassandra binds an unauthenticated JMX/RMI interface to all network interfaces. As RMI is an API for the transport and remote execution of serialized Java, anyone with access to this interface can execute arbitrary code as the running user...
CVE-2015-0886 vulnerabilities
Vulnerabilities for packages: cassandra-reaper...
Apache Cassandra Detection (Thrift)
Thrift based detection of Apache Cassandra. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Atrium Software Cassandra NNTP Server 1.10 Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1156/info Unchecked buffer exists in the code that handles login information in Cassandra NNTP v1.10 server. Entering a login name that consists of over 10 000 characters will cause the server to stop responding until the...
Nosql-Exploitation-Framework - A FrameWork For NoSQL Scanning and Exploitation Framework
A FrameWork For NoSQL Scanning, Enumeration and Exploitation. NoSQL Databases are schema less databases. They were invented to store data easily and flexibly. NoSQL Databases have gained popularity and its security has always been under the scanner. The NoSQL Exploitation Framework focuses...
Automated NoSQL Database Injection Attacks: NoSQLMap
NoSQLMap is an open source Python tool designed to audit for as well as automate injection attacks and exploit default configuration weaknesses in NoSQL databases as well as web applications using NoSQL in order to disclose data from the database. It is named as a tribute to Bernardo Damele and...
cassandra-brute NSE Script
Performs brute force password auditing against the Cassandra database. For more information about Cassandra, see: Script Arguments passdb, unpwdb.passlimit, unpwdb.timelimit, unpwdb.userlimit, userdb See the documentation for the unpwdb library. creds.service, creds.global See the documentation f...
cassandra-info NSE Script
Attempts to get basic info and server status from a Cassandra database. For more information about Cassandra, see: Script Arguments creds.service, creds.global See the documentation for the creds library. Example Usage nmap -p 9160 --script=cassandra-info Script Output PORT STATE SERVICE REASON...
CVE-2000-0341
The CVE-2000-0341 entry concerns ATRIUM Cassandra NNTP Server 1.10. The connected Nessus plugin and CVE listings indicate a remote buffer overflow in the AUTHINFO USER handling: providing a long login name can crash the server and, per the plugin, could allow remote code execution. This is a netw...