PT-2016-7819 · Apache+1 · Tomcat8+3

Published 2016-12-02 · Updated 2021-06-14 · CVE-2016-9775

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions tomcat6 versions 6.0.45+dfsg-1deb7u2 and earlier tomcat6 versions 6.0.45+dfsg-1deb8u0 and earlier tomcat6 versions 6.0.35-1ubuntu3.8 and earlier tomcat7 versions 7.0.28-4+deb7u6 and earlier tomcat7 versions 7.0.56-3+deb8u5 and earlier tomcat7 versions 7.0.52-1ubuntu0.7 and earlier tomcat8 versions 8.0.14-1+deb8u4 and earlier tomcat8 versions 8.0.32-1ubuntu1.2 and earlier tomcat8 versions 8.0.37-1ubuntu0.0 and earlier tomcat8 versions 8.0.38-2ubuntu0 and earlier

Description The issue might allow local users with access to the tomcat account to gain root privileges via a setgid program in the Catalina directory. This can be demonstrated by a program in the /etc/tomcat8/Catalina/attack directory.

Recommendations For tomcat6 versions 6.0.45+dfsg-1deb7u2 and earlier, update to version 6.0.45+dfsg-1deb7u3 or later. For tomcat6 versions 6.0.45+dfsg-1deb8u0 and earlier, update to version 6.0.45+dfsg-1deb8u1 or later. For tomcat6 versions 6.0.35-1ubuntu3.8 and earlier, update to version 6.0.35-1ubuntu3.9 or later. For tomcat7 versions 7.0.28-4+deb7u6 and earlier, update to version 7.0.28-4+deb7u7 or later. For tomcat7 versions 7.0.56-3+deb8u5 and earlier, update to version 7.0.56-3+deb8u6 or later. For tomcat7 versions 7.0.52-1ubuntu0.7 and earlier, update to version 7.0.52-1ubuntu0.8 or later. For tomcat8 versions 8.0.14-1+deb8u4 and earlier, update to version 8.0.14-1+deb8u5 or later. For tomcat8 versions 8.0.32-1ubuntu1.2 and earlier, update to version 8.0.32-1ubuntu1.3 or later. For tomcat8 versions 8.0.37-1ubuntu0.0 and earlier, update to version 8.0.37-1ubuntu0.1 or later. For tomcat8 versions 8.0.38-2ubuntu0 and earlier, update to version 8.0.38-2ubuntu1 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2016-9775

DLA-728-1

DLA-729-1

DSA-3738-1

DSA-3739-1

USN-3177-1

USN-3177-2

Affected Products

Ubuntu

Tomcat6

Tomcat7

Tomcat8

References · 54

• https://ubuntu.com/security/CVE-2016-8745 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/tomcat7 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-6816 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-9774 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8745 · Security Note
• https://ubuntu.com/security/CVE-2016-0762 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-6796 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-9775 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-8735 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-01545 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6816 · Security Note
• https://ubuntu.com/security/CVE-2016-5388 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3738-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3177-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-6797 · Vendor Advisory