CVE-2016-1240

This exploit targets a privilege escalation vulnerability in Apache Tomcat packaging on Debian-based distributions. It allows local attackers with access to the tomcat user to escalate privileges to root by manipulating the catalina.out log file via symlink attacks.

The repository contains descriptions and references for multiple CVEs, including CVE-2014-2064, but lacks executable exploit code for the specified CVE. It includes detailed explanations and references for vulnerabilities in Tomcat, Spring, and Jenkins.

This repository contains a functional exploit for CVE-2016-1240, a local privilege escalation vulnerability in Apache Tomcat 7. The exploit leverages a symlink attack on the catalina.out log file to manipulate /etc/ld.so.preload and execute arbitrary code with root privileges.

This Metasploit module exploits CVE-2016-1240, a privilege escalation vulnerability in Apache Tomcat on Ubuntu/Debian systems. It manipulates the catalina.out log file to create a symlink to /etc/ld.so.preload, allowing arbitrary library loading for root privilege escalation.