Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges

Alerts This Week
Warning Icon 1 488
Alerts This Week
Warning Icon 1 488

Ubuntu 16.04 LTS: USN-7282-1 moderate: tomcat7 arbitrary execution

ubuntu
Calendar Grey February 25, 2025
Scroller Ubuntu
The Ubuntu Security Announcement USN-7283-1 concerns vulnerabilities in tomcat8, which may permit unauthorized remote code execution.
tomcat7 could be made to execute arbitrary code.

Summary

tomcat7 could be made to execute arbitrary code.

Software Description:

- tomcat7: Servlet and JSP engine

Details:

It was discovered that Tomcat incorrectly handled being configured with

HTTP PUTs enabled. A remote attacker could use this issue to upload a JSP

file to the server and execute arbitrary code.

Topics%20covered

Topics Covered

security advisory software update Ubuntu remote execution tomcat7

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS
   libtomcat7-java                 7.0.68-1ubuntu0.4+esm3
                                   Available with Ubuntu Pro
   tomcat7                         7.0.68-1ubuntu0.4+esm3
                                   Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7282-1

CVE-2017-12616, CVE-2017-12617

Severity
important
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7282-1

Topics%20covered

Topics Covered

security advisory software update Ubuntu remote execution tomcat7

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.