CVE-2016-8742

Related Files

Apache CouchDB 2.0.0 Local Privilege Escalation

Posted Dec 5, 2016

Authored by hyp3rlinx | Site hyp3rlinx.altervista.org

Apache CouchDB sets weak file permissions potentially allowing 'Standard' Windows users to elevate privileges. The "nssm.exe" (Apache CouchDB) executable can be replaced by a 'Standard' non administrator user, allowing them to add a backdoor Administrator account once the "Apache CouchDB" service is restarted or system rebooted. As Apache CouchDB runs as LOCALSYSTEM, standard users can now execute arbitrary code with the privileges of the SYSTEM. Version 2.0.0 is affected.

tags | exploit, arbitrary

systems | windows

advisories | CVE-2016-8742

SHA-256 | 68b1e098eddc65e76ee3877ef1fec35d1f90f759cb3fda181fd4c2b03a67aedf

Download | Favorite | View