CVE

Id
9880  
CVE No.
CVE-2004-1452  
Status
Candidate  
Description
Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes the scripts with root privileges, which could allow local users in the tomcat group to execute arbitrary commands as root by modifying the scripts.  
Phase
Assigned (20050213)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
67473 9880 CVE-2004-1452 GENTOO:GLSA-200408-15  View
67474 9880 CVE-2004-1452 URL:http://www.gentoo.org/security/en/glsa/glsa-200408-15.xml  View
67475 9880 CVE-2004-1452 BID:10951  View
67476 9880 CVE-2004-1452 URL:http://www.securityfocus.com/bid/10951  View
67477 9880 CVE-2004-1452 SECUNIA:12296  View
67478 9880 CVE-2004-1452 URL:http://secunia.com/advisories/12296/  View
67479 9880 CVE-2004-1452 XF:gentoo-tomcat-gain-privileges(16993)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62985 JVNDB-2004-000327 GNU glibc の LD_DEBUG および LD_SHOW_AUXV における情報漏洩の脆弱性 GNU glibc には、権限のないユーザが LD_DEBUG または LD_SHOW_AUXV を設定した場合に、本来ならば出力が制限されるべき setuid プログラムにおいて情報漏洩の脆弱性が存在します。 CVE-2004-1453 9880 2.1 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000327.html  View