NVD

Id
9461  
Name
CVE-2011-2729  
Description
native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30 through 6.0.32, and 7.0.x before 7.0.20 on Linux, does not drop capabilities, which allows remote attackers to bypass read permissions for files via a request to an application.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-08-15  
Modified Date
2016-08-22  
Seq
2011-2729  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
54095 9461 CVE-2011-2729 openSUSE-SU-2011:1062  View
54096 9461 CVE-2011-2729 [commons-dev] 20110812 [AANNOUNCE] Apache Commons Daemon 1.0.7 released  View
54097 9461 CVE-2011-2729 [tomcat-announce] 20110812 [SECURITY] CVE-2011-2729: Commons Daemon fails to drop capabilities (Apache Tomcat)  View
54098 9461 CVE-2011-2729 SSRT100627  View
54099 9461 CVE-2011-2729 SSRT100825  View
54100 9461 CVE-2011-2729 HPSBUX02860  View
54101 9461 CVE-2011-2729 HPSBST02955  View
54102 9461 CVE-2011-2729 oval:org.mitre.oval:def:14743  View
54103 9461 CVE-2011-2729 oval:org.mitre.oval:def:19450  View
54104 9461 CVE-2011-2729 http://people.apache.org/~markt/patches/2011-08-12-cve2011-2729-tc5.patch  View
54105 9461 CVE-2011-2729 1025925  View
54106 9461 CVE-2011-2729 http://svn.apache.org/viewvc?view=revision&revision=1152701  View
54107 9461 CVE-2011-2729 http://svn.apache.org/viewvc?view=revision&revision=1153379  View
54108 9461 CVE-2011-2729 http://svn.apache.org/viewvc?view=revision&revision=1153824  View
54109 9461 CVE-2011-2729 http://tomcat.apache.org/security-5.html  View
54110 9461 CVE-2011-2729 http://tomcat.apache.org/security-6.html  View
54111 9461 CVE-2011-2729 http://tomcat.apache.org/security-7.html  View
54112 9461 CVE-2011-2729 RHSA-2011:1291  View
54113 9461 CVE-2011-2729 RHSA-2011:1292  View
54114 9461 CVE-2011-2729 20110812 [SECURITY] CVE-2011-2729: Commons Daemon fails to drop capabilities (Apache Tomcat)  View
54115 9461 CVE-2011-2729 49143  View
54116 9461 CVE-2011-2729 tomcat-jsvc-info-disclosure(69161)  View
54117 9461 CVE-2011-2729 https://bugzilla.redhat.com/show_bug.cgi?id=730400  View
54118 9461 CVE-2011-2729 https://issues.apache.org/jira/browse/DAEMON-214  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31934 JVNDB-2011-002174 Apache Tomcat で使用される Apache Commons の jsvc における読み取り権限を回避される脆弱性 Apache Tomcat で使用される Apache Commons の Daemon コンポーネント内にある jsvc の native/unix/native/jsvc-unix.c は、ケーパビリティコードに関する処理に不備があるため、ファイルの読み取り権限を回避される脆弱性が存在します。 CVE-2011-2729 50636 CVE-2011-2729 9461 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002174.html 2011-08-03 2015-03-05 View