exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Apache Cassandra Remote Code Execution

Posted Apr 1, 2015

Authored by G. Geshev

Under its default configuration, Cassandra binds an unauthenticated JMX/RMI interface to all network interfaces. As RMI is an API for the transport and remote execution of serialized Java, anyone with access to this interface can execute arbitrary code as the running user. Versions 1.2.0 to 1.2.19, 2.0.0 to 2.0.13, and 2.1.0 to 2.1.3 are affected.

tags | advisory, java, remote, arbitrary

advisories | CVE-2015-0225

SHA-256 | d79a592a24e0f1d275de2bef522ee3e10d9c60eb83bb3d79b0647c9167894d02

Download | Favorite | View

Related Files

No related files