CVE-2013-2051

Related Files

Red Hat Security Advisory 2013-0869-01

Posted May 28, 2013

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2013-0869-01 - Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages technologies. A flaw was found in the way the tomcat6 init script handled the tomcat6-initd.log log file. A malicious web application deployed on Tomcat could use this flaw to perform a symbolic link attack to change the ownership of an arbitrary system file to that of the tomcat user, allowing them to escalate their privileges to root. Note: With this update, tomcat6-initd.log has been moved from /var/log/tomcat6/ to the /var/log/ directory.

tags | advisory, java, web, arbitrary, root

systems | linux, redhat

advisories | CVE-2013-1976, CVE-2013-2051

SHA-256 | 401e4a4f336235be1cf456c5a4ad7081526d207288121b04e31993f2bece5aaf

Download | Favorite | View