CVE-2004-1452 | BDVDB-2026-8151 Detail

Description#

Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes the scripts with root privileges, which could allow local users in the tomcat group to execute arbitrary commands as root by modifying the scripts.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/10951
https://exchange.xforce.ibmcloud.com/vulnerabilities/16993
http://www.gentoo.org/security/en/glsa/glsa-200408-15.xml
http://secunia.com/advisories/12296/

Exploit#

No public exploit known

History#

Version 12005-02-13Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.