CVE-2010-2953 Untrusted search path vulnerability in a certain Debian GNU/Linux patch for the couchdb script in CouchDB 0.8.0 allows local users to gain privileges via a crafted shared library in the current workin...
MediumCVSS 6.9
EPSS 0.60%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in a certain Debian GNU/Linux patch for the couchdb script in CouchDB 0.8.0 allows local users to gain privileges via a crafted shared library in the current working directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache couchdb | = 0.8.0 | No fix listed |
References
- bugs.debian.org
- 41383 third-party-advisory vendor-advisory
- DSA-2107 vendor-advisory
- www.nth-dimension.org.uk
- [oss-security] 20100825 CVE request: CouchDB insecure library loading (Debian/Ubuntu only) mailing-list
- [oss-security] 20100826 Re: CVE request: CouchDB insecure library loading (Debian/Ubuntu only) mailing-list
- [oss-security] 20100826 Re: CVE request: CouchDB insecure library loading (Debian/Ubuntu only) mailing-list
- [oss-security] 20100829 Hardening the linker (was Re: CVE request: CouchDB insecure library loading (Debian/Ubuntu only)) mailing-list
- 42758 vdb-entry
- ADV-2010-2341 vdb-entry vendor-advisory