CVE-2016-8742

The Windows installer that the Apache CouchDB team provides was vulnerable to local privilege escalation. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe service launcher, or CouchDB batch or binary files. A subsequent service or server restart will then run that binary with administrator privilege. This issue affected CouchDB 2.0.0 (Windows platform only) and was addressed in CouchDB 2.0.0.1.

• CWE-264

• http://mail-archives.apache.org/mod_mbox/couchdb-dev/201612.mbox/%3C825F65E1-0E5F-4E1F-8053-CF2C6200C526%40apache.org%3EVendor Advisory
• http://www.securityfocus.com/bid/94766Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/40865/Third Party Advisory, VDB Entry
• http://mail-archives.apache.org/mod_mbox/couchdb-dev/201612.mbox/%3C825F65E1-0E5F-4E1F-8053-CF2C6200C526%40apache.org%3EVendor Advisory
• http://www.securityfocus.com/bid/94766Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/40865/Third Party Advisory, VDB Entry

Published

Feb 12, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8736Apache OpenMeetings before 3.1.2 is vulnerable to Remote Cod…
• CVE-2016-8737In Apache Brooklyn before 0.10.0, the REST server is vulnera…
• CVE-2016-8738In Apache Struts 2.5 through 2.5.5, if an application allows…
• CVE-2016-8739The JAX-RS module in Apache CXF prior to 3.0.12 and 3.1.x pr…
• CVE-2016-8740The mod_http2 module in the Apache HTTP Server 2.4.17 throug…
• CVE-2016-8741The Apache Qpid Broker for Java can be configured to use dif…7.5
• CVE-2016-8743Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.…7.5
• CVE-2016-8744Apache Brooklyn uses the SnakeYAML library for parsing YAML …
• CVE-2016-8745A bug in the error handling of the send file code for the NI…
• CVE-2016-8746Apache Ranger before 0.6.3 policy engine incorrectly matches…
• CVE-2016-8747An information disclosure issue was discovered in Apache Tom…7.5
• CVE-2016-8748In Apache NiFi before 1.0.1 and 1.1.x before 1.1.1, there is…