CVE

Id
61923  
CVE No.
CVE-2013-1976  
Status
Candidate  
Description
The (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of Tomcat for JBoss Enterprise Web Server 1.0.2 and 2.0.0, and Red Hat Enterprise Linux 5 and 6, allow local users to change the ownership of arbitrary files via a symlink attack on (a) tomcat5-initd.log, (b) tomcat6-initd.log, (c) catalina.out, or (d) tomcat7-initd.log.  
Phase
Assigned (20130219)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
620013 61923 CVE-2013-1976 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=927622  View
620014 61923 CVE-2013-1976 REDHAT:RHSA-2013:0869  View
620015 61923 CVE-2013-1976 URL:http://rhn.redhat.com/errata/RHSA-2013-0869.html  View
620016 61923 CVE-2013-1976 REDHAT:RHSA-2013:0870  View
620017 61923 CVE-2013-1976 URL:http://rhn.redhat.com/errata/RHSA-2013-0870.html  View
620018 61923 CVE-2013-1976 REDHAT:RHSA-2013:0871  View
620019 61923 CVE-2013-1976 URL:http://rhn.redhat.com/errata/RHSA-2013-0871.html  View
620020 61923 CVE-2013-1976 REDHAT:RHSA-2013:0872  View
620021 61923 CVE-2013-1976 URL:http://rhn.redhat.com/errata/RHSA-2013-0872.html  View
620022 61923 CVE-2013-1976 SUSE:openSUSE-SU-2013:1306  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
21411 JVNDB-2013-002986 X.org libX11 における整数オーバーフローの脆弱性 X.org libX11 には、下記の関数の処理に不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2013-1981 61923 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002986.html  View