Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1) hashes or (2) passwords.

Ver. 0.10.2 (bugfix release).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its banner, the version of CouchDB running on the remote host has an information leak vulnerability. The application does not use a constant-time comparison algorithm when attempting to verify hashes and passwords. The server will respond to mismatches more quickly than it responds to matches.

A remote attacker could exploit this by performing side-channel brute force attacks, which could lead to administrative access.

The remote host is running CouchDB, a document-oriented database.  The installed version of CouchDB is earlier than 0.11.0.  Such versions are potentially affected by an information disclosure vulnerability via a timing attack caused by a break-on-equality string comparison when verifying hashes or passwords.

ID	Name	Product	Family	Severity
47484	Fedora 12 : couchdb-0.10.2-1.fc12 (2010-8298)	Nessus	Fedora Local Security Checks	medium
47482	Fedora 11 : couchdb-0.10.2-1.fc11 (2010-8275)	Nessus	Fedora Local Security Checks	medium
47478	Fedora 13 : couchdb-0.10.2-1.fc13 (2010-8234)	Nessus	Fedora Local Security Checks	medium
45435	Apache CouchDB < 0.11.0 Hash Verification Information Leak	Nessus	Databases	medium
5503	CouchDB < 0.11.0 Timing Attack Vulnerability	Nessus Network Monitor	Database	medium

Detections

Analytics

CVE-2010-0009

high

Tenable Plugins

medium

medium

medium

medium

medium