CVE-2011-2729

native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30…

published August 15, 2011

CVSS
—
EPSS
7%
Percentile
94.3
In the wild
Unconfirmed
What it is

native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30 through 6.0.32, and 7.0.x before 7.0.20 on Linux, does not drop capabilities, which allows remote attackers to bypass read permissions for files via a request to an application.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07243 · 94.3th percentile
Published
2011-08-15T21:00Z
EPSS history
Timeline
  • 15 AUG 21:00Z
    native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30…
    cvelistv5