PT-2010-1835 · Apache · Apache Couchdb

Publicado 2010-04-05 · Atualizado 2018-10-10 · CVE-2010-0009

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache CouchDB versions 0.8.0 through 0.10.1

Description The issue allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify hashes or passwords.

Recommendations For Apache CouchDB versions 0.8.0 through 0.10.1, update to a version that contains a fix for this issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2010-0009

Produtos afetados

Apache Couchdb

Referências · 9

• http://osvdb.org/63350 · Nota
• http://securityfocus.com/bid/39116 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-0009 · Nota de Segurança
• http://couchdb.apache.org/security.html · Aviso do Fabricante
• http://securityfocus.com/archive/1/510427/100/0/threaded · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0009 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2010-03/0267.html · Nota
• http://secunia.com/advisories/39146 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=578572 · Nota