Test ID:	1.3.6.1.4.1.25623.1.0.107258
Category:	Databases
Title:	Apache CouchDB 1.x < 1.7.0, 2.x < 2.1.1 Multiple Vulnerabilities - Linux
Summary:	Apache CouchDB is prone to multiple vulnerabilities.
Description:	Summary: Apache CouchDB is prone to multiple vulnerabilities. Vulnerability Insight: The vulnerabilities are due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser. Vulnerability Impact: These vulnerabilities can be used to give non-admin users access to arbitrary shell commands on the server as the database system user. Affected Software/OS: Apache CouchDB version 1.x prior to 1.7.0 and 2.x prior to 2.1.1. Solution: Update to version 1.7.0, 2.1.1 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-12635 BugTraq ID: 101868 http://www.securityfocus.com/bid/101868 https://www.exploit-db.com/exploits/44498/ https://www.exploit-db.com/exploits/45019/ https://security.gentoo.org/glsa/201711-16 https://lists.debian.org/debian-lts-announce/2018/01/msg00026.html https://lists.apache.org/thread.html/6c405bf3f8358e6314076be9f48c89a2e0ddf00539906291ebdf0c67@%3Cdev.couchdb.apache.org%3E Common Vulnerability Exposure (CVE) ID: CVE-2017-12636 https://www.exploit-db.com/exploits/44913/
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.