Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

tomcat: insecure directory mode

Package(s):

tomcat

CVE #(s):

Created:

June 2, 2003

Updated:

June 3, 2003

Description:

Versions prior to tomcat-4.1.24 created /opt/tomcat with a directory mode which allowed users to access files containing passwords.

Alerts:

Gentoo

2003-06-01

(Log in to post comments)