NVD

Id
20679  
Name
CVE-2016-5425  
Description
The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distributions uses weak permissions for /usr/lib/tmpfiles.d/tomcat.conf, which allows local users to gain root privileges by leveraging membership in the tomcat group.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-10-13  
Modified Date
2016-10-31  
Seq
2016-5425  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
113235 20679 CVE-2016-5425 http://legalhackers.com/advisories/Tomcat-RedHat-Pkgs-Root-PrivEsc-Exploit-CVE-2016-5425.html  View
113236 20679 CVE-2016-5425 http://packetstormsecurity.com/files/139041/Apache-Tomcat-8-7-6-Privilege-Escalation.html  View
113237 20679 CVE-2016-5425 RHSA-2016:2046  View
113238 20679 CVE-2016-5425 [oss-security] 20161010 CVE-2016-5425 - Apache Tomcat packaging on RedHat-based distros - Root Privilege Escalation (affecting CentOS, Fedora, OracleLinux, RedHat etc.)  View
113239 20679 CVE-2016-5425 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html  View
113240 20679 CVE-2016-5425 93472  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
4789 JVNDB-2016-005562 複数の Linux ディストリビューションの Tomcat パッケージにおける root 権限を取得される脆弱性 Red Hat Enterprise Linux (RHEL) 7、Fedora、CentOS、Oracle Linux、およびその他の Linux ディストリビューションの Tomcat パッケージは、/usr/lib/tmpfiles.d/tomcat.conf に脆弱なパーミッションを使用するため、root 権限を取得される脆弱性が存在します。 CVE-2016-5425 91931 CVE-2016-5425 20679 7.2 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005562.html 2016-10-10 2016-12-05 View