CVE-2010-0009
published 2010-04-05CVE-2010-0009: Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1)…
PriorityP420medium4.3CVSS 2.0
AVNACMAuNCPINAN
EPSS
5.33%
92.6th percentile
Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1) hashes or (2) passwords.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | couchdb | — | — |
| apache | couchdb | — | — |
| apache | couchdb | — | — |
| apache | couchdb | — | — |
| apache | couchdb | — | — |
| apache | couchdb | — | — |
| apache | couchdb | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
vendor_redhat4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Apache CouchDB up to 0.10.1 information disclosure (Nessus ID 45435 / ID 118269)
vuldb·2026-05-05·CVSS 4.3
CVE-2010-0009 [MEDIUM] Apache CouchDB up to 0.10.1 information disclosure (Nessus ID 45435 / ID 118269)
A vulnerability classified as problematic has been found in Apache CouchDB up to 0.10.1. This vulnerability affects unknown code. The manipulation leads to information disclosure.
This vulnerability is listed as CVE-2010-0009. The attack may be initiated remotely. There is no available exploit.
GHSA
GHSA-jwf7-c2x3-76h8: Apache CouchDB 0
ghsa_unreviewed·2022-05-02
CVE-2010-0009 [MEDIUM] CWE-200 GHSA-jwf7-c2x3-76h8: Apache CouchDB 0
Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1) hashes or (2) passwords.
Red Hat
Apache CouchDB v0.10.0 prone to timing attacks vulnerability
vendor_redhat·2010-03-31·CVSS 4.3
CVE-2010-0009 [MEDIUM] Apache CouchDB v0.10.0 prone to timing attacks vulnerability
Apache CouchDB v0.10.0 prone to timing attacks vulnerability
Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1) hashes or (2) passwords.
Suricata
GPL DNS named iquery attempt
suricata·2010-09-23
CVE-1999-0009 GPL DNS named iquery attempt
GPL DNS named iquery attempt
Rule: alert udp $EXTERNAL_NET any -> $HOME_NET 53 (msg:"GPL DNS named iquery attempt"; content:"|09 80 00 00 00 01 00 00 00 00|"; depth:16; offset:2; reference:bugtraq,134; reference:cve,1999-0009; reference:url,www.rfc-editor.org/rfc/rfc1035.txt; classtype:attempted-recon; sid:2100252; rev:9; metadata:created_at 2010_09_23, cve CVE_1999_0009, confidence Medium, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2019_07_26;)
http://archives.neohapsis.com/archives/bugtraq/2010-03/0267.htmlhttp://couchdb.apache.org/security.htmlhttp://secunia.com/advisories/39146http://www.osvdb.org/63350http://www.securityfocus.com/archive/1/510427/100/0/threadedhttp://www.securityfocus.com/bid/39116https://bugzilla.redhat.com/show_bug.cgi?id=578572http://archives.neohapsis.com/archives/bugtraq/2010-03/0267.htmlhttp://couchdb.apache.org/security.htmlhttp://secunia.com/advisories/39146http://www.osvdb.org/63350http://www.securityfocus.com/archive/1/510427/100/0/threadedhttp://www.securityfocus.com/bid/39116https://bugzilla.redhat.com/show_bug.cgi?id=578572
2010-04-05
Published