Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2013-1976
HistoryJul 09, 2013 - 5:55 p.m.

CVE-2013-1976

2013-07-0917:55:00
Debian Security Bug Tracker
security-tracker.debian.org
10

0.0004 Low

EPSS

Percentile

5.1%

The (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of Tomcat for JBoss Enterprise Web Server 1.0.2 and 2.0.0, and Red Hat Enterprise Linux 5 and 6, allow local users to change the ownership of arbitrary files via a symlink attack on (a) tomcat5-initd.log, (b) tomcat6-initd.log, ยฉ catalina.out, or (d) tomcat7-initd.log.

OSVersionArchitecturePackageVersionFilename
Debian9alltomcat7<ย 7.0.75-1tomcat7_7.0.75-1_all.deb