Bug#576304: [Pkg-erlang-devel] Bug#576304: CVE-2010-0009: Apache CouchDB Timing Attack Vulnerability

2010-04-12 Thread Sam Bisbee
On Fri, Apr 02, 2010 at 10:23:16PM +0200, Moritz Muehlenhoff wrote: > Package: couchdb > Severity: important > Tags: security > > The following advisory was posted to full-disclosure. I don't see > the security implications, can you tell me what property is being > attacked here through the timing

Bug#576304: CVE-2010-0009: Apache CouchDB Timing Attack Vulnerability

2010-04-02 Thread Moritz Muehlenhoff
Package: couchdb Severity: important Tags: security The following advisory was posted to full-disclosure. I don't see the security implications, can you tell me what property is being attacked here through the timing attack? Cheers, Moritz CVE-2010-0009: Apache CouchDB Timing Attack Vuln