Description
Untrusted search path vulnerability in a certain Debian GNU/Linux patch for the couchdb script in CouchDB 0.8.0 allows local users to gain privileges via a crafted shared library in the current working directory.
References (10)
Core 10
Core References
Various Sources x_refsource_misc
http://www.nth-dimension.org.uk/blog.php?id=87
Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2010/2341
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/41383
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/42758
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2010/08/29/4
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2010/08/26/5
Issue Tracking x_refsource_confirm
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=594412
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2010/08/26/1
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2010/08/25/7
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2010/dsa-2107
Scores
EPSS
0.0060
EPSS Percentile
44.7%
Details
Status
published
Products (1)
apache/couchdb
0.8.0
Published
Sep 14, 2010
Tracked Since
Feb 18, 2026