CVE-2010-2953: Medium severity Apache CouchDB vulnerability
Untrusted search path vulnerability in a certain Debian GNU/Linux patch for the couchdb script in CouchDB 0.8.0 allows local users to gain privileges via a crafted shared library in the current working directory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2953?
CVE-2010-2953 has a moderate severity level due to its untrusted search path vulnerability allowing privilege escalation.
Who is affected by CVE-2010-2953?
CVE-2010-2953 affects local users of Apache CouchDB version 0.8.0 on Debian GNU/Linux systems.
How do I fix CVE-2010-2953?
To fix CVE-2010-2953, you should update Apache CouchDB to a patched version that resolves the untrusted search path issue.
What is the nature of the vulnerability in CVE-2010-2953?
CVE-2010-2953 is an untrusted search path vulnerability that allows local users to exploit crafted shared libraries.
Can exploitation of CVE-2010-2953 lead to system compromise?
Yes, exploitation of CVE-2010-2953 can lead to privilege escalation and potential system compromise.