Lucene search
RootSSV:60813HistoryMay 30, 2013 - 12:00 a.m.
Apache Tomcat 不安全临时文件处理漏洞(CVE-2013-1976)
2013-05-3000:00:00
Root
www.seebug.org
34
0.0004 Low
EPSS
Percentile
5.7%
BUGTRAQ ID: 60186
CVE(CAN) ID: CVE-2013-1976
Apache Tomcat是一个流行的开源JSP应用服务器程序。
Apache Tomcat服务中init脚本在管理Tomcat日志文件时存在漏洞，本地攻击者可利用此漏洞造成拒绝服务，或者通过对Tomcat日志文件的符号链接攻击，以特权系统用户权限执行任意代码。
0
Apache Group Tomcat
厂商补丁：
Apache Group
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
Related
nessus
nessus
Scientific Linux Security Update : tomcat5 on SL5.x i386/x86_64 (20130528)
2013-05-29 00:00:00
Amazon Linux AMI : tomcat6 (ALAS-2013-196)
2013-09-04 00:00:00
RHEL 5 : tomcat5 (RHSA-2013:0870)
2013-05-29 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2013-196)
2015-09-08 00:00:00
CentOS Update for tomcat5 CESA-2013:0870 centos5
2013-05-31 00:00:00
RedHat Update for tomcat5 RHSA-2013:0870-01
2013-05-31 00:00:00
redhat
redhat
(RHSA-2013:0870) Important: tomcat5 security update
2013-05-28 00:00:00
(RHSA-2013:0872) Important: tomcat5 and tomcat6 security update
2013-05-28 00:00:00
(RHSA-2013:0871) Important: tomcat6 and tomcat7 security update
2013-05-28 17:26:19
veracode
veracode
Privilege Escalation
2019-01-15 08:53:56
oraclelinux
oraclelinux
tomcat5 security update
2013-05-28 00:00:00
tomcat6 security update
2013-05-28 00:00:00
debiancve
debiancve
CVE-2013-1976
2013-07-09 17:55:00
centos
centos
tomcat5 security update
2013-05-28 18:47:52
tomcat6 security update
2013-05-29 08:25:00
prion
prion
Input validation
2013-07-09 17:55:00
ubuntucve
ubuntucve
CVE-2013-1976
2013-07-09 00:00:00
amazon
amazon
Important: tomcat6
2013-06-11 22:44:00
cve
cve
CVE-2013-1976
2013-07-09 17:55:00
mageia
mageia
Updated tomcat6 packages fix multiple vulnerabilities and logging
2014-02-17 22:13:24
f5
f5
K20038622 : Multiple Apache Tomcat vulnerabilities
2020-08-06 00:00:00