CVE-2004-1452: Gentoo Linux

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes the scripts with root privileges, which could allow local users in the tomcat group to execute arbitrary commands as root by modifying the scripts.

Affected products

• Gentoo Linux: version 0.5 only; version 0.7 only; version 1.1a only; version 1.2 only; version 1.4 only

Published 2004-12-31. Last modified 2026-06-16.