CVE-2004-1452

Tomcat on Gentoo Linux (before 5.0.27-r3) is vulnerable: the init scripts are owned by tomcat:tomcat but run as root, potentially allowing members of the tomcat group to run arbitrary commands as root by modifying the scripts. Affected package: Tomcat init/config scripts. Impact: local privilege ...