CVE-2010-2953

MEDIUM 6.9CVE-2010-2953 · Published 14/09/2010 · updated 16/06/2026

In short

CVE-2010-2953 is a MEDIUM (CVSS 6.9) vulnerability affecting couchdb (apache).
Chance of exploitation in the next 30 days (EPSS): 0.60%, higher than 48.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
couchdb apache	`= 0.8.0`	No fix yet

Description

Untrusted search path vulnerability in a certain Debian GNU/Linux patch for the couchdb script in CouchDB 0.8.0 allows local users to gain privileges via a crafted shared library in the current working directory.

References

bugs.debian.org/cgi-bin/bugreport.cgi
secunia.com/advisories/41383 · Vendor Advisory
debian.org/security/2010/dsa-2107
nth-dimension.org.uk/blog.php
openwall.com/lists/oss-security/2010/08/25/7
openwall.com/lists/oss-security/2010/08/26/1
openwall.com/lists/oss-security/2010/08/26/5
openwall.com/lists/oss-security/2010/08/29/4
securityfocus.com/bid/42758
vupen.com/english/advisories/2010/2341 · Vendor Advisory

More vulnerabilities in couchdb

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

couchdb

apache

= 0.8.0

No fix yet

More vulnerabilities in couchdb

See all →