Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Gentoo: GLSA-200408-15 Normal: Tomcat Insecure Installation Risk

gentoo
Calendar Grey August 15, 2004
Scroller Gentoo
Enhance your security posture by analyzing the vulnerabilities tied to the Tomcat setup and implementing measures to prevent root access breaches on Gentoo.
Improper file ownership may allow a member of the tomcat group to execute scripts as root.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200408-15
                                            https://security.gentoo.org/

  Severity: Normal
     Title: Tomcat: Insecure Installation
      Date: August 15, 2004
      Bugs: #59232
        ID: 200408-15


Synopsis
=======
Improper file ownership may allow a member of the tomcat group to
execute scripts as root.

Background
=========
Tomcat is the Apache Jakarta Project's official implementation of Java
Servlets and Java Server Pages.

Affected packages
================
    -------------------------------------------------------------------
     Package         /   Vulnerable   /                     Unaffected
    -------------------------------------------------------------------
  1  net-www/tomcat      < 5.0.27-r3                      >= 5.0.27-r3
                                                         *>= 4.1.30-r4
                                           ...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory root compromise normal severity gentoo distribution tomcat installation

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory root compromise normal severity gentoo distribution tomcat installation

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround