CVE-2010-2953

Currently unrated

Key Information:

Vendor
Apache
Status
Couchdb
Vendor
CVE Published:
14 September 2010

Summary

Untrusted search path vulnerability in a certain Debian GNU/Linux patch for the couchdb script in CouchDB 0.8.0 allows local users to gain privileges via a crafted shared library in the current working directory.

References

http://www.nth-dimension.org.uk/blog.php?id=87
x_refsource_MISC
http://www.vupen.com/english/advisories/2010/2341
vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/41383
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.