CVE-2011-2729 native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30 through 6.0.32, and 7.0.x before 7.0.20 on....
MediumCVSS 5.0
EPSS 7.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30 through 6.0.32, and 7.0.x before 7.0.20 on Linux, does not drop capabilities, which allows remote attackers to bypass read permissions for files via a request to an application.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/commons-daemon(Debian:12) | < 1.0.7-1 | 1.0.7-1 |
| debian/commons-daemon(Debian:13) | < 1.0.7-1 | 1.0.7-1 |
| debian/commons-daemon(Debian:14) | < 1.0.7-1 | 1.0.7-1 |
| apache tomcat | = 5.5.32 | No fix listed |
| apache tomcat | = 5.5.33 | No fix listed |
| apache tomcat | = 6.0.30 | No fix listed |
| apache tomcat | = 6.0.31 | No fix listed |
| apache tomcat | = 6.0.32 | No fix listed |
| apache tomcat | = 7.0.0 | No fix listed |
| apache tomcat | = 7.0.0-beta | No fix listed |
| apache tomcat | = 7.0.1 | No fix listed |
| apache tomcat | = 7.0.2 | No fix listed |
| apache tomcat | = 7.0.3 | No fix listed |
| apache tomcat | = 7.0.4 | No fix listed |
| apache tomcat | = 7.0.5 | No fix listed |
| apache tomcat | = 7.0.6 | No fix listed |
| apache tomcat | = 7.0.7 | No fix listed |
| apache tomcat | = 7.0.8 | No fix listed |
| apache tomcat | = 7.0.9 | No fix listed |
| apache tomcat | = 7.0.10 | No fix listed |
| apache tomcat | = 7.0.11 | No fix listed |
| apache tomcat | = 7.0.12 | No fix listed |
| apache tomcat | = 7.0.13 | No fix listed |
| apache tomcat | = 7.0.14 | No fix listed |
| apache tomcat | = 7.0.16 | No fix listed |
Show 6 more
| Product | Affected versions | Fixed in |
|---|---|---|
| apache tomcat | = 7.0.17 | No fix listed |
| apache tomcat | = 7.0.19 | No fix listed |
| apache commons daemon | = 1.0.3 | No fix listed |
| apache commons daemon | = 1.0.4 | No fix listed |
| apache commons daemon | = 1.0.5 | No fix listed |
| apache commons daemon | = 1.0.6 | No fix listed |
References
- Debian Security Tracker CVE-2011-2729 vendor-advisory
- openSUSE-SU-2011:1062 vendor-advisory
- [commons-dev] 20110812 [AANNOUNCE] Apache Commons Daemon 1.0.7 released mailing-list
- [tomcat-announce] 20110812 [SECURITY] CVE-2011-2729: Commons Daemon fails to drop capabilities (Apache Tomcat) mailing-list
- SSRT100627 vendor-advisory
- HPSBOV02762 vendor-advisory
- HPSBUX02860 vendor-advisory
- HPSBST02955 vendor-advisory
- people.apache.org
- 46030 third-party-advisory
- 57126 third-party-advisory
- 1025925 vdb-entry
- svn.apache.org
- svn.apache.org
- svn.apache.org
- tomcat.apache.org vendor-advisory
- tomcat.apache.org vendor-advisory
- tomcat.apache.org vendor-advisory
- RHSA-2011:1291 vendor-advisory
- RHSA-2011:1292 vendor-advisory
- 20110812 [SECURITY] CVE-2011-2729: Commons Daemon fails to drop capabilities (Apache Tomcat) mailing-list
- 49143 vdb-entry
- bugzilla.redhat.com
- tomcat-jsvc-info-disclosure(69161) vdb-entry
- issues.apache.org
- [tomcat-dev] 20190319 svn commit: r1855831 [22/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ mailing-list
- [tomcat-dev] 20190325 svn commit: r1856174 [20/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ mailing-list
- [tomcat-dev] 20200213 svn commit: r1873980 [25/34] - /tomcat/site/trunk/docs/ mailing-list
- [tomcat-dev] 20200203 svn commit: r1873527 [22/30] - /tomcat/site/trunk/docs/ mailing-list
- oval:org.mitre.oval:def:14743 signature vdb-entry
- oval:org.mitre.oval:def:19450 signature vdb-entry