REDHAT-BUG-927622
First published: Tue Mar 26 2013(Updated: )
A security flaw was found in the way init script implementation of the Tomcat service, an Apache Servlet/JSP Engine, as used in various versions of Red Hat Enterprise Linux and Fedora, performed management of Tomcat log file. A local attacker could use this flaw to cause denial of service or, potentially, execute arbitrary code with the privileges of the privileged system user (root) via symbolic link attacks on Tomcat log file. Acknowledgements: Red Hat would like to thank Simon Fayer of Imperial College London for reporting this issue.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tomcat | ||
| Red Hat Enterprise Linux | ||
| Fedora |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of REDHAT-BUG-927622?
The severity of REDHAT-BUG-927622 is classified as a moderate security flaw.
How do I fix REDHAT-BUG-927622?
To fix REDHAT-BUG-927622, users should update their Apache Tomcat installation or apply the relevant patches provided in the security advisories.
Who is affected by REDHAT-BUG-927622?
REDHAT-BUG-927622 affects users of various versions of Red Hat Enterprise Linux and Fedora that utilize Apache Tomcat.
What is the impact of REDHAT-BUG-927622?
The impact of REDHAT-BUG-927622 includes potential denial of service caused by local attackers exploiting the vulnerability.
Can REDHAT-BUG-927622 be exploited remotely?
No, REDHAT-BUG-927622 requires local access for exploitation.
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2013-1976
- agent/references
- agent/severity
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/apache
- canonical/tomcat
- vendor/red hat
- canonical/red hat enterprise linux
- canonical/fedora