CVE-2004-1452
published 2004-12-31CVE-2004-1452: Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes the scripts with root privileges, which…
PriorityP426high7.2CVSS 2.0
AVLACLAuNCCICAC
EPSS
0.44%
35.2th percentile
Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes the scripts with root privileges, which could allow local users in the tomcat group to execute arbitrary commands as root by modifying the scripts.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gentoo | linux | — | — |
| gentoo | linux | — | — |
| gentoo | linux | — | — |
| gentoo | linux | — | — |
| gentoo | linux | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/12296/http://www.gentoo.org/security/en/glsa/glsa-200408-15.xmlhttp://www.securityfocus.com/bid/10951https://exchange.xforce.ibmcloud.com/vulnerabilities/16993http://secunia.com/advisories/12296/http://www.gentoo.org/security/en/glsa/glsa-200408-15.xmlhttp://www.securityfocus.com/bid/10951https://exchange.xforce.ibmcloud.com/vulnerabilities/16993
2004-12-31
Published