CVE-2016-8742: High severity apache couchdb vulnerability
The Windows installer that the Apache CouchDB team provides was vulnerable to local privilege escalation. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe service launcher, or CouchDB batch or binary files. A subsequent service or server restart will then run that binary with administrator privilege. This issue affected CouchDB 2.0.0 (Windows platform only) and was addressed in CouchDB 2.0.0.1.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2016-8742?
CVE-2016-8742 is a vulnerability in the Windows installer provided by the Apache CouchDB team, which allows local privilege escalation.
What is the severity of CVE-2016-8742?
CVE-2016-8742 has a severity rating of 7.8 (high).
Which software versions are affected by CVE-2016-8742?
Apache CouchDB version 2.0.0 is affected by CVE-2016-8742.
How can a non-privileged user exploit CVE-2016-8742?
A non-privileged user can substitute any executable for the nssm.exe service launcher or CouchDB batch files and escalate their privileges.
Are all versions of Microsoft Windows vulnerable to CVE-2016-8742?
No, Microsoft Windows itself is not vulnerable to CVE-2016-8742.
How can I fix CVE-2016-8742?
To fix CVE-2016-8742, you should update to a patched version of Apache CouchDB, such as version 2.0.1 or later.