CVE-2012-3376

CVE-2012-3376 describes a critical authentication bypass vulnerability in Apache Hadoop 2.0.0 alpha DataNodes when Kerberos is enabled. This flaw allows remote, unauthenticated attackers to read or write to arbitrary data blocks by exploiting a weakness where BlockTokens are not properly checked if a DataNode has registered the same BlockPool multiple times. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for significant confidentiality, integrity, and availability impacts. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage surrounding this CVE.