CVE-2017-6711

A vulnerability in the Ultra Automation Service UAS of the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted device. The vulnerability is due to an insecure default configuration of the Apache ZooKeeper service used by the...

Cisco Ultra Services Framework UAS Unauthenticated Access Vulnerability

A vulnerability in the Ultra Automation Service UAS of the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted device. The vulnerability is due to an insecure default configuration of the Apache ZooKeeper service used by the...

Zookeeper 3.5.2 Client - Denial of Service

Zookeeper 3.5.2 Client - Denial of Service !/usr/bin/python Exploit Title: Zookeeper Client Denial Of Service Port 2181 Date: 2/7/2017 Exploit Author: Brandon Dennis Email: [email protected] Software Link: http://zookeeper.apache.org/releases.htmldownload Zookeeper Version: 3.5.2 Tested on:...

Zookeeper 3.5.2 Client - Denial of Service

!/usr/bin/python Exploit Title: Zookeeper Client Denial Of Service Port 2181 Date: 2/7/2017 Exploit Author: Brandon Dennis Email: [email protected] Software Link: http://zookeeper.apache.org/releases.htmldownload Zookeeper Version: 3.5.2 Tested on: Windows 2008 R2, Windows 2012 R2 x64 & x86...

Debian DLA-986-1 : zookeeper security update

It was discovered that Zookeeper, a service for maintaining configuration information, didn't restrict access to the computationally expensive wchp/wchc commands which could result in denial of service by elevated CPU consumption. This update disables those two commands by default. The new...

[SECURITY] [DLA 986-1] zookeeper security update

Package : zookeeper Version : 3.4.5+dfsg-2+deb7u1 CVE ID : CVE-2017-5637 Debian Bug : 863811 It was discovered that Zookeeper, a service for maintaining configuration information, didnt restrict access to the computationally expensive wchp/wchc commands which could result in denial of service by...

DLA-986-1 zookeeper - security update

Bulletin has no description...

Apache Zookeeper Denial of Service Vulnerability

Apache Zookeeper is a software project of the U.S. Apache Apache Software Foundation, which can provide open source distributed configuration services, synchronization services and naming registry for large-scale distributed computing. A denial of service vulnerability exists in Apache Zookeeper...

Debian DSA-3871-1 : zookeeper - security update

It was discovered that Zookeeper, a service for maintaining configuration information, didn't restrict access to the computationally expensive wchp/wchc commands which could result in denial of service by elevated CPU consumption. This update disables those two commands by default. The new...

[SECURITY] [DSA 3871-1] zookeeper security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3871-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 01, 2017 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3871-1 (zookeeper - security update)

It was discovered that Zookeeper, a service for maintaining configuration information, didn OpenVAS Vulnerability Test $Id: deb3871.nasl 7690 2017-11-08 06:26:20Z asteins $ Auto-generated from advisory DSA 3871-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright...

DSA-3871-1 zookeeper - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3871-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

zookeeper is vulnerable to denial of service DoS attacks. The vulnerability is possible because it does not properly handle four letter zookeeper commands such as wchp /wchc/wchc . Therefore, when non-trusted clients get access to the client port i.e., if the zookeeper service is not protected...

Information Disclosure

solr-core is vulnerable to information disclosure. The vulnerability is possible because it does not protect the credentials from security.json when it is being retrieved on Zookeepr API and admin level...

Zookeeper 3.5.2 - Denial of Service Exploit

Exploit for linux platform in category dos / poc !/usr/bin/python Exploit Title: Zookeeper Client Denial Of Service Port 2181 Date: 2/7/2017 Exploit Author: Brandon Dennis Email: email protected Software Link: http://zookeeper.apache.org/releases.htmldownload Zookeeper Version: 3.5.2 Tested on:...

Zookeeper 3.5.2 - Denial of Service

Zookeeper 3.5.2 - Denial of Service. Dos exploit for Linux platform !/usr/bin/python Exploit Title: Zookeeper Client Denial Of Service Port 2181 Date: 2/7/2017 Exploit Author: Brandon Dennis Email: [email protected] Software Link: http://zookeeper.apache.org/releases.htmldownload Zookeeper...

PT-2017-4199 · Apache +2 · Apache Zookeeper +2

Name of the Vulnerable Software and Affected Versions: Apache ZooKeeper versions prior to 3.4.10 Apache ZooKeeper versions prior to 3.5.3 Description: The issue is related to the lack of authentication for a critical function in the implementation of the wchp/wchc command in Apache ZooKeeper, whi...

Fedora 24 : zookeeper (2016-54a717d5d6)

Security fix for CVE-2016-5017 update to 3.4.9 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 25 : zookeeper (2016-5557ccf1f9)

Security fix for CVE-2016-5017 update to 3.4.9 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...