CVE-2016-8742

The Windows installer that the Apache CouchDB team provides was vulnerable to local privilege escalation. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe service launcher, or CouchDB...

CVE-2016-8742

CVE-2016-8742 affects CouchDB 2.0.0 on Windows where the Windows installer inherited the parent directory’s permissions, allowing a non-privileged user to substitute executables for nssm.exe or CouchDB launcher files. A restart then executes the tainted binary with administrator privileges, enabl...

CVE-2016-8742

creationtimestamp| type| source ---|---|--- 2016-12-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40865...