{"id":"CVE-2016-1240","aliases":["DEBIAN-CVE-2016-1240","DLA-622-1","DLA-623-1","DSA-3669-1","DSA-3670-1","EUVD-2016-2341","GHSA-8c5c-v572-37xf","RHSA-2017:0455","RHSA-2017:0456","UBUNTU-CVE-2016-1240","USN-3081-1","USN-3081-2"],"status":"published","title":"The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8...","description":"The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8.0.14-1+deb8u3 on Debian jessie and the tomcat6 and libtomcat6-java packages before 6.0.35-1ubuntu3.8 on Ubuntu 12.04 LTS, the tomcat7 and libtomcat7-java packages before 7.0.52-1ubuntu0.7 on Ubuntu 14.04 LTS, and tomcat8 and libtomcat8-java packages before 8.0.32-1ubuntu1.2 on Ubuntu 16.04 LTS allows local users with access to the tomcat account to gain root privileges via a symlink attack on the Catalina log file, as demonstrated by /var/log/tomcat7/catalina.out.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.09783,"percentile":0.95572,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-20"],"published":"2016-09-15T00:00:00Z","modified":"2026-10-24T10:30:50Z","exploits":[{"source":"metasploit","id":"exploit/linux/local/tomcat_ubuntu_log_init_priv_esc","title":"Apache Tomcat on Ubuntu Log Init Privilege Escalation","type":"exploit","platform":"Linux","date":"2016-09-30","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/local/tomcat_ubuntu_log_init_priv_esc"},{"source":"exploitdb","id":"EDB-40450","title":"Apache Tomcat 8/7/6 (Debian-Based Distros) - Local Privilege Escalation","type":"local","platform":"linux","date":"2016-10-03","verified":true,"url":"https://www.exploit-db.com/exploits/40450"},{"source":"pocgithub","id":"Naramsim/Offensive","title":"Naramsim/Offensive","date":"2016-10-13","url":"https://github.com/Naramsim/Offensive"},{"source":"pocgithub","id":"mhe18/CVE_Project","title":"mhe18/CVE_Project","date":"2018-12-02","url":"https://github.com/mhe18/CVE_Project"}],"fixes":[{"ecosystem":"Debian:7","package":"tomcat6","fixed_in":["6.0.45+dfsg-1~deb7u2"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"tomcat7","fixed_in":["7.0.28-4+deb7u6"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"tomcat7","fixed_in":["7.0.56-3+deb8u4"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"tomcat8","fixed_in":["8.0.14-1+deb8u3"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"tomcat6","fixed_in":["6.0.39-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"tomcat7","fixed_in":["7.0.52-1ubuntu0.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"tomcat6","fixed_in":["6.0.45+dfsg-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"tomcat7","fixed_in":["7.0.68-1ubuntu0.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"tomcat8","fixed_in":["8.0.32-1ubuntu1.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:7","package":"tomcat6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.45+dfsg-1~deb7u2"}]}],"versions":["6.0.35-6","6.0.35-6+deb7u1","6.0.35-7","6.0.37-1","6.0.39-1","6.0.41-1","6.0.41-2","6.0.41-2+squeeze5","6.0.41-2+squeeze6","6.0.41-2+squeeze7","6.0.41-3","6.0.41-4","6.0.45+dfsg-1~deb7u1","6.0.45-1~deb6u1"]},{"source":"osv","ecosystem":"Debian:7","package":"tomcat7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.28-4+deb7u6"}]}],"versions":["7.0.28-4","7.0.28-4+deb7u1","7.0.28-4+deb7u2","7.0.28-4+deb7u3","7.0.28-4+deb7u4","7.0.28-4+deb7u5"]},{"source":"osv","ecosystem":"Debian:8","package":"tomcat7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.56-3+deb8u4"}]}],"versions":["7.0.56-3","7.0.56-3+deb8u1","7.0.56-3+deb8u2","7.0.56-3+deb8u3"]},{"source":"osv","ecosystem":"Debian:8","package":"tomcat8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.14-1+deb8u3"}]}],"versions":["8.0.14-1","8.0.14-1+deb8u1","8.0.14-1+deb8u2"]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"hibernate4-c3p0-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.23-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"hibernate4-core-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.23-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"hibernate4-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.23-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"hibernate4-entitymanager-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.23-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"hibernate4-envers-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.23-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"jbcs-httpd24-apache-commons-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.15-1.redhat_2.1.jbcs.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"jbcs-httpd24-apache-commons-daemon-jsvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.15-17.redhat_2.jbcs.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.15-17.redhat_2.jbcs.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"jbcs-httpd24-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1-3.jbcs.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"mod_cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-2.Final_redhat_2.1.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"mod_cluster-tomcat7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-2.Final_redhat_2.1.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"mod_cluster-tomcat8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-2.Final_redhat_2.1.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"tomcat-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-9.redhat_9.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"tomcat-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-9.redhat_9.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"tomcat-vault","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.8-9.Final_redhat_2.1.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"tomcat7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.70-16.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"tomcat7-admin-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.70-16.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"tomcat7-docs-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.70-16.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"tomcat7-el-2.2-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.70-16.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"tomcat7-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.70-16.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"tomcat7-jsp-2.2-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.70-16.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"tomcat7-jsvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.70-16.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"tomcat7-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.70-16.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"tomcat7-log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.70-16.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"tomcat7-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.70-16.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"tomcat7-servlet-3.0-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.70-16.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"tomcat7-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.70-16.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"tomcat8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-17.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"tomcat8-admin-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-17.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"tomcat8-docs-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-17.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"tomcat8-el-2.2-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-17.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"tomcat8-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-17.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"tomcat8-jsp-2.3-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-17.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"tomcat8-jsvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-17.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"tomcat8-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-17.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"tomcat8-log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-17.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"tomcat8-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-17.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"tomcat8-servlet-3.1-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-17.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el6","package":"tomcat8-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-17.ep7.el6"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"hibernate4-c3p0-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.23-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"hibernate4-core-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.23-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"hibernate4-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.23-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"hibernate4-entitymanager-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.23-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"hibernate4-envers-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.23-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"jbcs-httpd24-apache-commons-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.15-1.redhat_2.1.jbcs.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"jbcs-httpd24-apache-commons-daemon-jsvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.15-17.redhat_2.jbcs.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.15-17.redhat_2.jbcs.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"jbcs-httpd24-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1-3.jbcs.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"mod_cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-2.Final_redhat_2.1.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"mod_cluster-tomcat7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-2.Final_redhat_2.1.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"mod_cluster-tomcat8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-2.Final_redhat_2.1.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"tomcat-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-9.redhat_9.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"tomcat-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-9.redhat_9.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"tomcat-vault","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.8-9.Final_redhat_2.1.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"tomcat7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.70-16.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"tomcat7-admin-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.70-16.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"tomcat7-docs-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.70-16.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"tomcat7-el-2.2-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.70-16.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"tomcat7-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.70-16.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"tomcat7-jsp-2.2-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.70-16.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"tomcat7-jsvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.70-16.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"tomcat7-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.70-16.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"tomcat7-log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.70-16.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"tomcat7-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.70-16.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"tomcat7-servlet-3.0-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.70-16.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"tomcat7-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.70-16.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"tomcat8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-17.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"tomcat8-admin-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-17.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"tomcat8-docs-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-17.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"tomcat8-el-2.2-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-17.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"tomcat8-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-17.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"tomcat8-jsp-2.3-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-17.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"tomcat8-jsvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-17.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"tomcat8-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-17.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"tomcat8-log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-17.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"tomcat8-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-17.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"tomcat8-servlet-3.1-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-17.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:3.1::el7","package":"tomcat8-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-17.ep7.el7"}]}],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"tomcat6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.39-1ubuntu0.1"}]}],"versions":["6.0.37-1","6.0.39-1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"tomcat7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.52-1ubuntu0.7"}]}],"versions":["7.0.42-1","7.0.47-1","7.0.50-1","7.0.52-1","7.0.52-1ubuntu0.1","7.0.52-1ubuntu0.3","7.0.52-1ubuntu0.6"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"tomcat6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.45+dfsg-1ubuntu0.2"}]}],"versions":["6.0.41-4","6.0.45+dfsg-1","6.0.45+dfsg-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"tomcat7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.68-1ubuntu0.3"}]}],"versions":["7.0.64-1","7.0.68-1","7.0.68-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"tomcat8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.32-1ubuntu1.2"}]}],"versions":["8.0.26-1","8.0.28-1","8.0.30-1","8.0.32-1","8.0.32-1ubuntu1","8.0.32-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"tomcat7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.52-1ubuntu0.7"}]}],"versions":["7.0.42-1","7.0.47-1","7.0.50-1","7.0.52-1","7.0.52-1ubuntu0.1","7.0.52-1ubuntu0.3","7.0.52-1ubuntu0.6"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"tomcat8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.32-1ubuntu1.2"}]}],"versions":["8.0.26-1","8.0.28-1","8.0.30-1","8.0.32-1","8.0.32-1ubuntu1","8.0.32-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"tomcat6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.45+dfsg-1ubuntu0.2"}]}],"versions":["6.0.41-4","6.0.45+dfsg-1","6.0.45+dfsg-1ubuntu0.1"]}],"products":[{"vendor":"apache","product":"tomcat"}],"references":[{"url":"http://www.securitytracker.com/id/1036845","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3670","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/201705-09","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://legalhackers.com/advisories/Tomcat-DebPkgs-Root-Privilege-Escalation-Exploit-CVE-2016-1240.html","tags":["x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/93263","tags":["vdb-entry","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0457.html","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20180731-0002/","tags":["x_transferred","advisory"]},{"url":"https://www.exploit-db.com/exploits/40450/","tags":["exploit","x_transferred","web"]},{"url":"http://www.debian.org/security/2016/dsa-3669","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0455","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/archive/1/539519/100/0/threaded","tags":["mailing-list","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0456","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3081-1","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"http://packetstormsecurity.com/files/170857/Apache-Tomcat-On-Ubuntu-Log-Init-Privilege-Escalation.html","tags":["x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1240","tags":["advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20180731-0002"},{"url":"https://www.exploit-db.com/exploits/40450"},{"url":"https://github.com/advisories/GHSA-8c5c-v572-37xf"},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1349468","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1367447","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376712","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390493","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390515","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390520","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390525","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390526","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1397484","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1397485","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1403824","tags":["report"]},{"url":"https://issues.redhat.com/browse/JWS-267","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0455.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0762","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0762","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0762","tags":["advisory"]},{"url":"https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.47","tags":["article"]},{"url":"https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.72","tags":["article"]},{"url":"https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.5_and_8.0.37","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1240","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1240","tags":["advisory","report"]},{"url":"http://legalhackers.com/advisories/Tomcat-DebPkgs-Root-Privilege-Escalation-Exploit-CVE-2016-1240.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3092","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3092","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3092","tags":["advisory"]},{"url":"http://tomcat.apache.org/security-7.html","tags":["article"]},{"url":"http://tomcat.apache.org/security-8.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5018","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5018","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5018","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6325","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6325","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6325","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6794","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6794","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6794","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6796","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6796","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6796","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6797","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6797","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6797","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6816","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6816","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6816","tags":["advisory"]},{"url":"https://access.redhat.com/articles/2991951","tags":["article"]},{"url":"https://access.redhat.com/solutions/2891171","tags":["article"]},{"url":"https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.48","tags":["article"]},{"url":"https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.73","tags":["article"]},{"url":"https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.0.39","tags":["article"]},{"url":"https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.8","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8735","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8735","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8735","tags":["advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8745","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8745","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8745","tags":["advisory"]},{"url":"https://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.49","tags":["article"]},{"url":"https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.74","tags":["article"]},{"url":"https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.0.40","tags":["article"]},{"url":"https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.9","tags":["article"]},{"url":"https://issues.redhat.com/browse/JWS-268","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0456.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-1240","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3081-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3081-2","tags":["advisory"]},{"url":"https://launchpad.net/bugs/1609819","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-1240","description":"The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8.0.14-1+deb8u3 on Debian jessie and the tomcat6 and libtomcat6-java packages before 6.0.35-1ubuntu3.8 on Ubuntu 12.04 LTS, the tomcat7 and libtomcat7-java packages before 7.0.52-1ubuntu0.7 on Ubuntu 14.04 LTS, and tomcat8 and libtomcat8-java packages before 8.0.32-1ubuntu1.2 on Ubuntu 16.04 LTS allows local users with access to the tomcat account to gain root privileges via a symlink attack on the Catalina log file, as demonstrated by /var/log/tomcat7/catalina.out.","status":"published","published":"2016-10-03T00:00:00Z","modified":"2024-08-05T22:48:13.696Z","updated_at":"2026-11-02T14:33:35.488991Z"}],"euvd":[{"id":"EUVD-2016-2341","description":"The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8.0.14-1+deb8u3 on Debian jessie and the tomcat6 and libtomcat6-java packages before 6.0.35-1ubuntu3.8 on Ubuntu 12.04 LTS, the tomcat7 and libtomcat7-java packages before 7.0.52-1ubuntu0.7 on Ubuntu 14.04 LTS, and tomcat8 and libtomcat8-java packages before 8.0.32-1ubuntu1.2 on Ubuntu 16.04 LTS allows local users with access to the tomcat account to gain root privileges via a symlink attack on the Catalina log file, as demonstrated by /var/log/tomcat7/catalina.out.","status":"published","published":"2016-10-03T00:00:00Z","modified":"2024-08-05T22:48:13Z","updated_at":"2026-11-03T02:22:57.974183Z"}],"ghsa":[{"id":"GHSA-8c5c-v572-37xf","title":"The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8...","description":"The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8.0.14-1+deb8u3 on Debian jessie and the tomcat6 and libtomcat6-java packages before 6.0.35-1ubuntu3.8 on Ubuntu 12.04 LTS, the tomcat7 and libtomcat7-java packages before 7.0.52-1ubuntu0.7 on Ubuntu 14.04 LTS, and tomcat8 and libtomcat8-java packages before 8.0.32-1ubuntu1.2 on Ubuntu 16.04 LTS allows local users with access to the tomcat account to gain root privileges via a symlink attack on the Catalina log file, as demonstrated by /var/log/tomcat7/catalina.out.","status":"published","published":"2022-05-14T02:47:05Z","modified":"2025-04-12T13:05:56Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:01:29.780856Z"}],"nvd":[{"id":"CVE-2016-1240","description":"The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8.0.14-1+deb8u3 on Debian jessie and the tomcat6 and libtomcat6-java packages before 6.0.35-1ubuntu3.8 on Ubuntu 12.04 LTS, the tomcat7 and libtomcat7-java packages before 7.0.52-1ubuntu0.7 on Ubuntu 14.04 LTS, and tomcat8 and libtomcat8-java packages before 8.0.32-1ubuntu1.2 on Ubuntu 16.04 LTS allows local users with access to the tomcat account to gain root privileges via a symlink attack on the Catalina log file, as demonstrated by /var/log/tomcat7/catalina.out.","status":"published","published":"2016-10-03T15:59:00.207Z","modified":"2026-06-17T00:41:32.153Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:03:31.485755Z"}],"osv":[{"id":"CVE-2016-1240","description":"The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8.0.14-1+deb8u3 on Debian jessie and the tomcat6 and libtomcat6-java packages before 6.0.35-1ubuntu3.8 on Ubuntu 12.04 LTS, the tomcat7 and libtomcat7-java packages before 7.0.52-1ubuntu0.7 on Ubuntu 14.04 LTS, and tomcat8 and libtomcat8-java packages before 8.0.32-1ubuntu1.2 on Ubuntu 16.04 LTS allows local users with access to the tomcat account to gain root privileges via a symlink attack on the Catalina log file, as demonstrated by /var/log/tomcat7/catalina.out.","status":"published","published":"2016-10-03T15:59:00.207Z","modified":"2026-10-24T10:30:50.768360699Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:02.114472Z"},{"id":"RHSA-2017:0455","title":"Red Hat Security Advisory: Red Hat JBoss Web Server 3.1.0 security and enhancement update","status":"published","published":"2024-09-29T17:09:22Z","modified":"2026-10-08T10:01:22Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:0456","title":"Red Hat Security Advisory: Red Hat JBoss Web Server 3.1.0 security and enhancement update","status":"published","published":"2024-09-29T17:09:27Z","modified":"2026-10-08T10:01:23Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"UBUNTU-CVE-2016-1240","description":"The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8.0.14-1+deb8u3 on Debian jessie and the tomcat6 and libtomcat6-java packages before 6.0.35-1ubuntu3.8 on Ubuntu 12.04 LTS, the tomcat7 and libtomcat7-java packages before 7.0.52-1ubuntu0.7 on Ubuntu 14.04 LTS, and tomcat8 and libtomcat8-java packages before 8.0.32-1ubuntu1.2 on Ubuntu 16.04 LTS allows local users with access to the tomcat account to gain root privileges via a symlink attack on the Catalina log file, as demonstrated by /var/log/tomcat7/catalina.out.","status":"published","published":"2016-09-16T00:00:00Z","modified":"2026-02-04T02:55:12.533536Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:11.492576Z"},{"id":"DLA-622-1","title":"tomcat6 - security update","status":"published","published":"2016-09-15T00:00:00Z","modified":"2026-03-09T02:10:02.876508Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DLA-623-1","title":"tomcat7 - security update","status":"published","published":"2016-09-15T00:00:00Z","modified":"2026-03-09T02:10:22.306851Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3669-1","title":"tomcat7 - security update","status":"published","published":"2016-09-15T00:00:00Z","modified":"2026-03-09T01:22:58.787143Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"DSA-3670-1","title":"tomcat8 - security update","status":"published","published":"2016-09-15T00:00:00Z","modified":"2026-03-09T01:20:26.339065Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"USN-3081-1","title":"tomcat6, tomcat7, tomcat8 vulnerability","description":"Dawid Golunski discovered that the Tomcat init script incorrectly handled\ncreating log files. A remote attacker could possibly use this issue to \nobtain root privileges. (CVE-2016-1240)\n\nThis update also reverts a change in behaviour introduced in USN-3024-1 by\nsetting mapperContextRootRedirectEnabled to True by default.\n","status":"published","published":"2016-09-19T16:55:51Z","modified":"2026-02-10T04:41:02Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-3081-2","title":"tomcat6 vulnerability","description":"Dawid Golunski discovered that the Tomcat init script incorrectly handled\ncreating log files. A remote attacker could possibly use this issue to\nobtain root privileges.\n","status":"published","published":"2020-10-27T17:43:46Z","modified":"2026-02-10T04:41:02Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}