Password Leakage

Apache Hadoop is vulnerable to password leakage. It is possible to leak the password for credential store provider used by the NodeManager to YARN Applications. If users use the CredentialProvider feature to encrypt passwords used in NodeManager configs, it may be possible for any Container...

CVE-2016-2011

Cross-site scripting XSS vulnerability in HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2010...

CVE-2014-3627

The YARN NodeManager daemon in Apache Hadoop 0.23.0 through 0.23.11 and 2.x before 2.5.2, when using Kerberos authentication, allows remote cluster users to change the permissions of certain files to world-readable via a symlink attack in a public tar archive, which is not properly handled during...

Authentication flaw

The YARN NodeManager daemon in Apache Hadoop 0.23.0 through 0.23.11 and 2.x before 2.5.2, when using Kerberos authentication, allows remote cluster users to change the permissions of certain files to world-readable via a symlink attack in a public tar archive, which is not properly handled during...

CVE-2014-3627

The YARN NodeManager daemon in Apache Hadoop 0.23.0 through 0.23.11 and 2.x before 2.5.2, when using Kerberos authentication, allows remote cluster users to change the permissions of certain files to world-readable via a symlink attack in a public tar archive, which is not properly handled during...

CVE-2014-3627

CVE-2014-3627 affects the YARN NodeManager in Apache Hadoop (versions 0.23.0–0.23.11 and 2.x prior to 2.5.2). The root cause is a symlink/localization handling issue in the distributed cache within a public tar archive when Kerberos authentication is used, enabling remote cluster users to change ...

CVE-2005-0185

Stack-based buffer overflow in NodeManager Professional 2.00 allows remote attackers to execute arbitrary commands via a LinkDown-Trap packet that contains a long OCTET-STRING in the Trap variable-bindings field...

CVE-2005-0185

CVE-2005-0185 describes a stack-based buffer overflow in NodeManager Professional 2.00 . The overflow occurs via a LinkDown-Trap packet containing a long OCTET-STRING in the Trap variable-bindings field, enabling an unauthenticated remote attacker to potentially execute arbitrary commands. The pr...

CVE-2005-0185

Stack-based buffer overflow in NodeManager Professional 2.00 allows remote attackers to execute arbitrary commands via a LinkDown-Trap packet that contains a long OCTET-STRING in the Trap variable-bindings field...

NodeManager Professional 2.00 - Remote Buffer Overflow

/ Included stdio.h for my compile errors /str0ke / // // NodeManager Professional V2.00 Buffer Overflow Vulnerability // Bind Shell Exploit for English Win2K/XP // 21 Dec 2004 // // NodeManager Professional is a network management and monitoring tool. // It receives SNMPv1 traps and displays them...

NodeManager Professional SNMP trap buffer overflow

Stack based buffer overflow on SNMPv1 trap processing...

[SIG^2 G-TEC] NodeManager Professional V2.00 Buffer Overflow Vulnerability

SIG^2 Vulnerability Research Advisory NodeManager Professional V2.00 Buffer Overflow Vulnerability by Tan Chew Keong Release Date: 17 Jan 2005 ADVISORY URL http://www.security.org.sg/vuln/nodemanager200.html SUMMARY NodeManager Professional http://www.h4.dion.ne.jp/you4707/NodeManagerPro.html is ...

NodeManager Professional 2.00 Buffer Overflow Vulnerability

Exploit for unknown platform in category remote exploits =========================================================== NodeManager Professional 2.00 Buffer Overflow Vulnerability =========================================================== / Included stdio.h for my compile errors /str0ke / // //...

NodeManager Professional 2.00 - Remote Buffer Overflow

NodeManager Professional 2.00 - Remote Buffer Overflow / Included stdio.h for my compile errors /str0ke / // // NodeManager Professional V2.00 Buffer Overflow Vulnerability // Bind Shell Exploit for English Win2K/XP // 21 Dec 2004 // // NodeManager Professional is a network management and...

CVE-2003-0640

BEA WebLogic Server and Express, when using NodeManager to start servers, provides Operator users with privileges to overwrite usernames and passwords, which may allow Operators to gain Admin privileges...

CVE-2003-0640

BEA WebLogic Server and Express are affected when NodeManager is used to start servers. Operator users can overwrite usernames and passwords, which may enable escalation to Admin privileges. The available documents confirm this description but do not specify affected versions or concrete exploit ...