PT-2016-7818 · Apache+1 · Apache Tomcat+1

Paul Szabo · Published 2016-12-02 · Updated 2018-08-02 · CVE-2016-9774

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions tomcat6 versions 6.0.35 through 6.0.44 tomcat6 version 6.0.45+dfsg-1~deb7u3 and earlier tomcat7 versions 7.0.28 through 7.0.52 tomcat7 version 7.0.56-3+deb8u5 and earlier tomcat8 versions 8.0.14 through 8.0.32 tomcat8 version 8.0.37-1ubuntu0.1 and earlier tomcat8 version 8.0.38-2ubuntu0 and earlier

Description The issue might allow local users with access to the tomcat account to obtain sensitive information or gain root privileges via a symlink attack on the Catalina localhost directory.

Recommendations For tomcat6 versions 6.0.35 through 6.0.44, update to version 6.0.45+dfsg-1deb7u4 or later. For tomcat6 version 6.0.45+dfsg-1deb7u3 and earlier, update to version 6.0.45+dfsg-1~deb7u4 or later. For tomcat7 versions 7.0.28 through 7.0.52, update to version 7.0.56-3+deb8u6 or later. For tomcat7 version 7.0.56-3+deb8u5 and earlier, update to version 7.0.56-3+deb8u6 or later. For tomcat8 versions 8.0.14 through 8.0.32, update to version 8.0.32-1ubuntu1.3 or later. For tomcat8 version 8.0.37-1ubuntu0.1 and earlier, update to version 8.0.37-1ubuntu0.1 or later. For tomcat8 version 8.0.38-2ubuntu0 and earlier, update to version 8.0.38-2ubuntu1 or later.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2016-9774

DLA-746-1

DLA-753-1

DSA-3738-1

DSA-3739-1

USN-3177-1

USN-3177-2

Affected Products

Apache Tomcat

Ubuntu

References · 53

• https://ubuntu.com/security/CVE-2016-8745 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/tomcat7 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-6816 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-9774 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-9774 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8745 · Security Note
• https://cve.org/CVERecord?id=CVE-2016-9774 · Security Note
• https://ubuntu.com/security/CVE-2016-6796 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-8735 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-01545 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6816 · Security Note
• https://ubuntu.com/security/CVE-2016-5388 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3738-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3177-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-6797 · Vendor Advisory