couchdb code execution

Ralative path for dynamic library loading...

Debian DSA-2107-1 : couchdb - untrusted search path

Dan Rosenberg discovered that in couchdb, a distributed, fault-tolerant and schema-free document-oriented database, an insecure library search path is used. A local attacker could execute arbitrary code by first dumping a maliciously crafted shared library in some directory, and then having an...

[SECURITY] [DSA 2107-1] New couchdb package fixes arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-2107-1 [email protected] http://www.debian.org/security/ Sébastien Delafond Sep 9, 2010 http://www.debian.org/security/faq - -...

DSA-2107-1 couchdb - arbitrary code execution

Bulletin has no description...

Apache CouchDB Cross Site Request Forgery Vulnerability

Apache CouchDB is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to gain unauthorized access to the affected application and perform certain actions in the context of the 'Futon' administration interface; other attacks are also possible...

Apache CouchDB < 0.11.1 CSRF Vulnerability

Apache CouchDB is prone to a cross-site request-forgery CSRF vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2010-2234: Apache CouchDB Cross Site Request Forgery Attack

CVE-2010-2234: Apache CouchDB Cross Site Request Forgery Attack Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache CouchDB 0.8.0 to 0.11.0 Description: Apache CouchDB versions prior to version 0.11.1 are vulnerable to cross site request forgery CSRF attacks...

Apache CouchDB < 0.11.2 Futon admin interface Cross-Site Request Forgery

According to its banner, the version of CouchDB running on the remote host is affected by a cross-site request forgery vulnerability. The application fails to properly sanitize user-supplied input before it is used in the Futon admin interface. A remote attacker could exploit this to execute...

CVE-2010-2234

Cross-site request forgery CSRF vulnerability in Apache CouchDB 0.8.0 through 0.11.0 allows remote attackers to hijack the authentication of administrators for direct requests to an installation URL...

CVE-2010-2234

Cross-site request forgery CSRF vulnerability in Apache CouchDB 0.8.0 through 0.11.0 allows remote attackers to hijack the authentication of administrators for direct requests to an installation URL...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Apache CouchDB 0.8.0 through 0.11.0 allows remote attackers to hijack the authentication of administrators for direct requests to an installation URL...

CVE-2010-2234

CVE-2010-2234 affects Apache CouchDB 0.8.0–0.11.0 and describes a cross-site request forgery (CSRF) that can hijack the administrator’s authentication for direct requests to an installation URL. The OpenVAS and Fedora advisory entries in the connected documents confirm CouchDB updates released to...

CVE-2010-2234

Cross-site request forgery CSRF vulnerability in Apache CouchDB 0.8.0 through 0.11.0 allows remote attackers to hijack the authentication of administrators for direct requests to an installation URL...

CouchDB < 0.11.2 Futon Admin Interface Cross-Site Request Forgery

Binary data 5642.prm...

Fedora 13 : couchdb-0.10.2-1.fc13 (2010-8234)

Ver. 0.10.2 bugfix release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 11 : couchdb-0.10.2-1.fc11 (2010-8275)

Ver. 0.10.2 bugfix release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 12 : couchdb-0.10.2-1.fc12 (2010-8298)

Ver. 0.10.2 bugfix release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora Update for couchdb FEDORA-2010-8275

Check for the Version of couchdb OpenVAS Vulnerability Test Fedora Update for couchdb FEDORA-2010-8275 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for couchdb FEDORA-2010-8298

Check for the Version of couchdb OpenVAS Vulnerability Test Fedora Update for couchdb FEDORA-2010-8298 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for couchdb FEDORA-2010-8298

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...