CVE-2016-5425

The Tomcat package on Red Hat Enterprise Linux RHEL 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distributions uses weak permissions for /usr/lib/tmpfiles.d/tomcat.conf, which allows local users to gain root privileges by leveraging membership in the tomcat group...

CVE-2016-5425

CVE-2016-5425 describes a local privilege escalation in Tomcat packages on RHEL7, Fedora, CentOS, Oracle Linux, and similar distros due to weak permissions on /usr/lib/tmpfiles.d/tomcat.conf. Local users in the tomcat group can exploit this to gain root privileges via systemd-tmpfiles handling. T...

RHEL 7 : tomcat (RHSA-2016:2046)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:2046 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: It was discovered that the...

RedHat Update for tomcat RHSA-2016:2046-01

The remote host is missing an update for the Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2016-5425

creationtimestamp| type| source ---|---|--- 2016-10-10 10:52:23+00:00| published-proof-of-concept| https://t.me/canyoupwnme/160 2016-10-11 16:36:42+00:00| published-proof-of-concept| https://t.me/FullDisclosure/149 2023-03-14 10:44:22+00:00| seen|...

Apache Tomcat 8 / 7 / 6 Privilege Escalation

============================================= - Discovered by: Dawid Golunski - http://legalhackers.com - dawid at legalhackers.com - CVE-2016-5425 - Release date: 10.10.2016 - Revision: 1 - Severity: High ============================================= I. VULNERABILITY -------------------------...

Apache Tomcat 8/7/6 (RedHat Based Distros) - Local Privilege Escalation

============================================= - Discovered by: Dawid Golunski - http://legalhackers.com - dawid at legalhackers.com - CVE-2016-5425 - Release date: 10.10.2016 - Revision: 1 - Severity: High ============================================= I. VULNERABILITY -------------------------...

CVE-2014-5425

CVE-2014-5425 affects IOServer and related DNP3 implementations. The flaw is an out-of-bounds read triggered by a null DNP3 header, leading to potential remote denial of service by exhausting master entries. According to ICS-CERT advisories, IOServer (Beta2112.exe) and related DNP3 implementation...

CVE-2013-5425

IBM WebSphere Virtual Enterprise CVE-2013-5425 is an XSS vulnerability in the Administration Console exploitable by remote authenticated users via a crafted URL. Affected versions: VE 6.1 prior to 6.1.1.6 and VE 7.0 prior to 7.0.0.4. Mitigation: apply theFix Pack/Interim Fix PM93828. For VE 7.0, ...

CVE-2013-5425

Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Virtual Enterprise 6.1 before 6.1.1.6 and 7.0 before 7.0.0.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2008-5425

CVE-2008-5425 and related entries describe a DoS risk from processing large or multipart email messages. Affected products across connected records include ESet NOD32 2.70.0039.0000; Mozilla Thunderbird 2.0.14; Microsoft Outlook Express 6.00.2900.5512; Norton Antivirus in Norton Internet Security...

CVE-2007-5425

SQL injection vulnerability in admin/index.php in Interspire ActiveKB 1.5 allows remote attackers to execute arbitrary SQL commands via the questId parameter in a hideQuestion ToDo action. NOTE: the catId vector is already covered by CVE-2007-5131...

CVE-2007-5425

CVE-2007-5425 is a SQL injection vulnerability in Interspire ActiveKB 1.5, exploitable via the questId parameter in admin/index.php under a hideQuestion ToDo action. The issue affects ActiveKB 1.5 (and relates to CVE-2007-5131 for the catId vector). The provided documents do not specify a patch o...

CVE-2006-5425

XORP (eXtensible Open Router Platform) versions 1.2 and 1.3 are affected by a vulnerability in OSPF handling: processing an Open Shortest Path First LSA with an invalid length field can cause an application crash, leading to a denial of service. The issue is tied to the LSA length validation path...