{"id":"CVE-2011-2729","aliases":["DEBIAN-CVE-2011-2729","EUVD-2011-2707","GHSA-7mg3-pr99-8rh7","RHSA-2011:1292","openSUSE-SU-2024:10167-1"],"status":"published","title":"native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache...","description":"native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30 through 6.0.32, and 7.0.x before 7.0.20 on Linux, does not drop capabilities, which allows remote attackers to bypass read permissions for files via a request to an application.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.07243,"percentile":0.94369,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-264"],"published":"2011-08-15T21:00:00Z","modified":"2026-10-23T17:47:45Z","fixes":[{"ecosystem":"Debian:12","package":"commons-daemon","fixed_in":["1.0.7-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"commons-daemon","fixed_in":["1.0.7-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"commons-daemon","fixed_in":["1.0.7-1"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-commons-daemon-jsvc","fixed_in":["1:1.0.5-1.5.patch01.ep5.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-commons-daemon-jsvc-debuginfo","fixed_in":["1:1.0.5-1.5.patch01.ep5.el4"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"apache-commons-daemon","fixed_in":["1.0.15-7.7"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"commons-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"commons-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"commons-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-1"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-commons-daemon-jsvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.5-1.5.patch01.ep5.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-commons-daemon-jsvc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.5-1.5.patch01.ep5.el4"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"apache-commons-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.15-7.7"}]}]}],"products":[{"vendor":"apache","product":"apache_commons_daemon"},{"vendor":"apache","product":"tomcat"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/69161","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00024.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://svn.apache.org/viewvc?view=revision\u0026revision=1153824","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=136485229118404\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://securitytracker.com/id?1025925","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://people.apache.org/~markt/patches/2011-08-12-cve2011-2729-tc5.patch","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://tomcat.apache.org/security-7.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=133469267822771\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=730400","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1291.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=132215163318824\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://svn.apache.org/viewvc?view=revision\u0026revision=1152701","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://svn.apache.org/viewvc?view=revision\u0026revision=1153379","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securityfocus.com/archive/1/519263/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://tomcat.apache.org/security-6.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/57126","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://mail-archives.apache.org/mod_mbox/commons-dev/201108.mbox/%3C4E451B2B.9090108%40apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://issues.apache.org/jira/browse/DAEMON-214","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/49143","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19450","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","web"]},{"url":"http://secunia.com/advisories/46030","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://tomcat.apache.org/security-5.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1292.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"http://mail-archives.apache.org/mod_mbox/tomcat-announce/201108.mbox/%3C4E45221D.1020306%40apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=139344343412337\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14743","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2729","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E"},{"url":"http://mail-archives.apache.org/mod_mbox/commons-dev/201108.mbox/%3C4E451B2B.9090108@apache.org%3E"},{"url":"http://mail-archives.apache.org/mod_mbox/tomcat-announce/201108.mbox/%3C4E45221D.1020306@apache.org%3E"},{"url":"https://github.com/advisories/GHSA-7mg3-pr99-8rh7"},{"url":"https://security-tracker.debian.org/tracker/CVE-2011-2729","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2011:1292","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1292.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-2729","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-2729","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2729","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2011-2729","description":"native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30 through 6.0.32, and 7.0.x before 7.0.20 on Linux, does not drop capabilities, which allows remote attackers to bypass read permissions for files via a request to an application.","status":"published","published":"2011-08-15T21:00:00Z","modified":"2024-08-06T23:08:23.965Z","updated_at":"2026-11-02T14:35:36.252742Z"}],"euvd":[{"id":"EUVD-2011-2707","description":"native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30 through 6.0.32, and 7.0.x before 7.0.20 on Linux, does not drop capabilities, which allows remote attackers to bypass read permissions for files via a request to an application.","status":"published","published":"2011-08-15T21:00:00Z","modified":"2024-08-06T23:08:23Z","updated_at":"2026-11-03T01:39:54.68331Z"}],"ghsa":[{"id":"GHSA-7mg3-pr99-8rh7","title":"native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache...","description":"native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30 through 6.0.32, and 7.0.x before 7.0.20 on Linux, does not drop capabilities, which allows remote attackers to bypass read permissions for files via a request to an application.","status":"published","published":"2022-05-14T01:17:03Z","modified":"2023-02-21T05:06:29Z","updated_at":"2026-11-02T14:54:11.906282Z"}],"nvd":[{"id":"CVE-2011-2729","description":"native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30 through 6.0.32, and 7.0.x before 7.0.20 on Linux, does not drop capabilities, which allows remote attackers to bypass read permissions for files via a request to an application.","status":"published","published":"2011-08-15T21:55:02.33Z","modified":"2026-06-16T23:31:53.093Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:09.182398Z"}],"osv":[{"id":"CVE-2011-2729","description":"native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30 through 6.0.32, and 7.0.x before 7.0.20 on Linux, does not drop capabilities, which allows remote attackers to bypass read permissions for files via a request to an application.","status":"published","published":"2011-08-15T21:55:02Z","modified":"2026-04-10T03:41:53.351516Z","updated_at":"2026-11-02T15:43:58.279353Z"},{"id":"DEBIAN-CVE-2011-2729","description":"native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30 through 6.0.32, and 7.0.x before 7.0.20 on Linux, does not drop capabilities, which allows remote attackers to bypass read permissions for files via a request to an application.","status":"published","published":"2011-08-15T21:55:02.33Z","modified":"2026-10-23T17:47:45.324169615Z","updated_at":"2026-11-02T15:45:24.612044Z"},{"id":"openSUSE-SU-2024:10167-1","title":"apache-commons-daemon-1.0.15-7.7 on GA media","description":"These are all security issues fixed in the apache-commons-daemon-1.0.15-7.7 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:40.211238Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2011:1292","title":"Red Hat Security Advisory: jakarta-commons-daemon-jsvc security update","status":"published","published":"2024-09-15T19:24:09Z","modified":"2026-08-05T10:01:31Z","updated_at":"2026-11-02T15:53:01.003286Z"}]}}