CVE-2013-1976: Red Hat Enterprise Linux

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

The (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of Tomcat for JBoss Enterprise Web Server 1.0.2 and 2.0.0, and Red Hat Enterprise Linux 5 and 6, allow local users to change the ownership of arbitrary files via a symlink attack on (a) tomcat5-initd.log, (b) tomcat6-initd.log, (c) catalina.out, or (d) tomcat7-initd.log.

Affected products

• Red Hat Enterprise Linux: version 5 only; version 6.0 only
• Red Hat JBoss Enterprise Web Server: version 1.0.2 only; version 2.0.0 only

Published 2013-07-09. Last modified 2026-06-16.