CVE-2004-1452

Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes the scripts with root privileges, which…

published February 13, 2005

CVSS
—
EPSS
0%
Percentile
37.2
In the wild
Unconfirmed
What it is

Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes the scripts with root privileges, which could allow local users in the tomcat group to execute arbitrary commands as root by modifying the scripts.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00440 · 37.2th percentile
Published
2005-02-13T05:00Z
EPSS history
Timeline
  • 13 FEB 05:00Z
    Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes the scripts with root privileges, which…
    cvelistv5