CVE-2016-1240
HIGHApache Tomcat on Ubuntu Log Init Privilege Escalation
Title source: metasploitExploitation Summary
EIP tracks 4 public exploits for CVE-2016-1240.
PoCs published by Dawid Golunski, Naramsim, mhe18, including Metasploit module exploits/linux/local/tomcat_ubuntu_log_init_priv_esc.
AI-analyzed exploit summary This exploit targets a privilege escalation vulnerability in Apache Tomcat packaging on Debian-based distributions. It allows local attackers with access to the tomcat user to escalate privileges to root by manipulating the catalina.out log file via symlink attacks.
Description
The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8.0.14-1+deb8u3 on Debian jessie and the tomcat6 and libtomcat6-java packages before 6.0.35-1ubuntu3.8 on Ubuntu 12.04 LTS, the tomcat7 and libtomcat7-java packages before 7.0.52-1ubuntu0.7 on Ubuntu 14.04 LTS, and tomcat8 and libtomcat8-java packages before 8.0.32-1ubuntu1.2 on Ubuntu 16.04 LTS allows local users with access to the tomcat account to gain root privileges via a symlink attack on the Catalina log file, as demonstrated by /var/log/tomcat7/catalina.out.
Exploits (4)
This exploit targets a privilege escalation vulnerability in Apache Tomcat packaging on Debian-based distributions. It allows local attackers with access to the tomcat user to escalate privileges to root by manipulating the catalina.out log file via symlink attacks.
The repository contains descriptions and references for multiple CVEs, including CVE-2014-2064, but lacks executable exploit code for the specified CVE. It includes detailed explanations and references for vulnerabilities in Tomcat, Spring, and Jenkins.
This repository contains a functional exploit for CVE-2016-1240, a local privilege escalation vulnerability in Apache Tomcat 7. The exploit leverages a symlink attack on the catalina.out log file to manipulate /etc/ld.so.preload and execute arbitrary code with root privileges.
This Metasploit module exploits CVE-2016-1240, a privilege escalation vulnerability in Apache Tomcat on Ubuntu/Debian systems. It manipulates the catalina.out log file to create a symlink to /etc/ld.so.preload, allowing arbitrary library loading for root privilege escalation.
References (14)
Scores
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H