Unscored severity · published Dec 31, 2004
CVE-2004-1452
Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes the scripts with root privileges, which could allow local…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes the scripts with root privileges, which could allow local users in the tomcat group to execute arbitrary commands as root by modifying the scripts.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 38% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linux · Gentoo
0.5; 0.7; 1.1a; 1.2; 1.4; 1.4; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-1452
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-1452
Patch
http://secunia.com/advisories/12296/
Patch
http://www.gentoo.org/security/en/glsa/glsa-200408-15.xml
Patch
http://www.securityfocus.com/bid/10951
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/16993
More from Linux
9.8
CVE-2024-12084
Rsync: heap buffer overflow in rsync due to improper checksum length handling
7.5
CVE-2024-12087
Rsync: path traversal vulnerability in rsync
7.5
CVE-2024-12088
Rsync: --safe-links option bypass leads to path traversal
7.5
CVE-2024-12085
Rsync: info leak via uninitialized stack contents
6.8
CVE-2024-12086
A flaw was found in rsync