tomcat: privilege escalation
| Package(s): | tomcat |
CVE #(s): | CVE-2016-1240
|
| Created: | September 15, 2016 |
Updated: | September 21, 2016 |
| Description: |
From the Debian-LTS advisory:
Dawid Golunski from legalhackers.com discovered that Debian's version
of Tomcat 6 was vulnerable to a local privilege escalation. Local
attackers who have gained access to the server in the context of the
tomcat6 user through a vulnerability in a web application were able to
replace the file with a symlink to an arbitrary file. |
| Alerts: |
|
