Lucene search
UbuntuUSN-1298-1HistoryDec 12, 2011 - 12:00 a.m.
Apache Commons Daemon vulnerability
2011-12-1200:00:00
ubuntu.com
47
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
4.4
Confidence
High
EPSS
0.002
Percentile
57.8%
Releases
- Ubuntu 11.10
- Ubuntu 11.04
Packages
- commons-daemon - wrapper to launch Java applications as daemons
Details
Wilfried Weissmann discovered that Apache Commons Daemon incorrectly
dropped capabilities after starting. A remote attacker could possibly use
this flaw to read certain files, bypassing the intended permissions.
References
Related
openvas
openvas
Ubuntu: Security Advisory (USN-1298-1)
2011-12-16 00:00:00
Fedora Update for apache-commons-daemon FEDORA-2011-10936
2011-08-31 00:00:00
Fedora Update for apache-commons-daemon FEDORA-2011-10880
2012-04-02 00:00:00
nvd
nvd
CVE-2011-2729
2011-08-15 21:55:02
nessus
nessus
openSUSE Security Update : jakarta-commons-daemon (openSUSE-SU-2011:1062-1)
2014-06-13 00:00:00
Fedora 16 : apache-commons-daemon-1.0.7-1.fc16 (2011-10880)
2011-08-24 00:00:00
Ubuntu 11.04 / 11.10 : commons-daemon vulnerability (USN-1298-1)
2011-12-13 00:00:00
securityvulns
securityvulns
[SECURITY] CVE-2011-2729: Commons Daemon fails to drop capabilities (Apache Tomcat)
2011-08-17 00:00:00
Apache Tomcat security vulnerabilities
2011-08-17 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: apache-commons-daemon-1.0.7-1.fc15
2011-08-26 19:04:45
[SECURITY] Fedora 16 Update: apache-commons-daemon-1.0.7-1.fc16
2011-08-23 20:23:41
ubuntucve
ubuntucve
CVE-2011-2729
2011-08-15 00:00:00
prion
prion
Authentication flaw
2011-08-15 21:55:00
cvelist
cvelist
CVE-2011-2729
2011-08-15 21:00:00
cve
cve
CVE-2011-2729
2011-08-15 21:55:02
tomcat
tomcat
Fixed in Apache Tomcat 7.0.20
2011-08-11 00:00:00
Fixed in Apache Tomcat 6.0.33
2011-08-18 00:00:00
Fixed in Apache Tomcat 5.5.34
2011-09-22 00:00:00
suse
suse
jakarta-commons-daemon (important)
2011-09-23 13:08:20
veracode
veracode
Privilege Escalation
2019-03-25 08:40:43
debiancve
debiancve
CVE-2011-2729
2011-08-15 21:55:02
osv
osv
apache-commons-daemon-1.0.15-7.7 on GA media
2024-06-15 00:00:00
gentoo
gentoo
Apache Tomcat: Multiple vulnerabilities
2012-06-24 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
4.4
Confidence
High
EPSS
0.002
Percentile
57.8%
Related for USN-1298-1