Gentoo Linux Tomcat EBuild Insecure Install Permissions Vulnerability

Bugtraq ID:	10951
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Aug 16 2004 12:00AM
Updated:	Aug 16 2004 12:00AM
Credit:	This vulnerability was announced by the vendor.
Vulnerable:	Gentoo Linux 1.4 _rc3 Gentoo Linux 1.4 _rc2 Gentoo Linux 1.4 _rc1 Gentoo Linux 1.4 Gentoo Linux 1.2 Gentoo Linux 1.1 a Gentoo Linux 0.7 Gentoo Linux 0.5
Not Vulnerable:

Gentoo Linux Tomcat EBuild Insecure Install Permissions Vulnerability

The Gentoo Linux Tomcat eBuild is reported prone to an insecure default install permission vulnerability. It is reported that certain Tomcat scripts are installed with permissions that allow members of the tomcat group to write to the file.

A local attacker that is a member of the Tomcat group may exploit this condition to escalate privileges.

Gentoo Linux Tomcat EBuild Insecure Install Permissions Vulnerability

There is no exploit required.

Gentoo Linux Tomcat EBuild Insecure Install Permissions Vulnerability

Solution:
Gentoo has released advisory (GLSA 200408-15) and an updated eBuild to address this issue. Users may apply this update by executing the following commands as a superuser:
emerge sync
emerge -pv ">=net-www/tomcat-5.0.27-r3"
emerge ">=net-www/tomcat-5.0.27-r3"

Gentoo Linux Tomcat EBuild Insecure Install Permissions Vulnerability

References: