Описание
Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1) hashes or (2) passwords.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | DNE | |
| devel | not-affected | 1.0.1-0ubuntu1 |
| hardy | DNE | |
| intrepid | ignored | end of life, was needed |
| jaunty | ignored | end of life |
| karmic | ignored | end of life |
| lucid | ignored | |
| maverick | not-affected | 1.0.1-0ubuntu1 |
| natty | not-affected | 1.0.1-0ubuntu1 |
| oneiric | not-affected | 1.0.1-0ubuntu1 |
Показывать по
Ссылки на источники
4.3 Medium
CVSS2
Связанные уязвимости
Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1) hashes or (2) passwords.
Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1) hashes or (2) passwords.
Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain ...
Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1) hashes or (2) passwords.
4.3 Medium
CVSS2