Unscored severity · published Jul 9, 2013
CVE-2013-1976
The (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of Tomcat for JBoss Enterprise Web Server 1.0.2 and 2.0.0, and Red Hat Enterprise Linux…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of Tomcat for JBoss Enterprise Web Server 1.0.2 and 2.0.0, and Red Hat Enterprise Linux 5 and 6, allow local users to change the ownership of arbitrary files via a symlink attack on (a) tomcat5-initd.log, (b) tomcat6-initd.log, (c) catalina.out, or (d) tomcat7-initd.log.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EL
Enterprise Linux · Redhat
5; 6.0 · source: NVD
JE
Jboss Enterprise Web Server · Redhat
1.0.2; 2.0.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-1976
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-1976
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2013-08/msg00013.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-0869.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-0870.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-0871.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-0872.html
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=927622
More from Enterprise Linux
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2018-14667
The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource
9.8
CVE-2014-7169
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
9.8
CVE-2014-6271
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
9.0
CVE-2021-40438
mod_proxy SSRF