CVEvulnerability

CVE-2013-1976

6.9 MEDIUM Published 2013-07-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-07-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-59

Description

The (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of Tomcat for JBoss Enterprise Web Server 1.0.2 and 2.0.0, and Red Hat Enterprise Linux 5 and 6, allow local users to change the ownership of arbitrary files via a symlink attack on (a) tomcat5-initd.log, (b) tomcat6-initd.log, (c) catalina.out, or (d) tomcat7-initd.log.

Affected configurations

• redhat jboss enterprise web server 1.0.2 • redhat jboss enterprise web server 2.0.0 • redhat enterprise linux 5 • redhat enterprise linux 6.0

Related

Weakness · CWE (1)

  • CWE-59 Improper Link Resolution Before File Access weakness

References