Skip to content
Fencer Intel
medium 6.9

CVE-2013-1976 json

The (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of Tomcat for JBoss Enterprise Web Server 1.0.2…

published 2013-07-09 13 y ago modified 2026-06-16 4 mo ago also EUVD-2013-1964

cvss
6.9
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 31%
public exploits
0
none known

Summary

The (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of Tomcat for JBoss Enterprise Web Server 1.0.2 and 2.0.0, and Red Hat Enterprise Linux 5 and 6, allow local users to change the ownership of arbitrary files via a symlink attack on (a) tomcat5-initd.log, (b) tomcat6-initd.log, (c) catalina.out, or (d) tomcat7-initd.log.

Patch / fix

  • tomcat5 jboss enterprise web server 1 5.5.33-33_patch_09.ep5.el5
  • tomcat5 jboss enterprise web server 1 5.5.33-36_patch_09.ep5.el6
  • tomcat6 jboss enterprise web server 1 6.0.32-32_patch_09.ep5.el5
  • tomcat6 jboss enterprise web server 1 6.0.32-35_patch_09.ep5.el6
  • tomcat6-lib jboss enterprise web server 1 6.0.32-32_patch_09.ep5.el5
  • tomcat6-lib jboss enterprise web server 1 6.0.32-35_patch_09.ep5.el6
  • tomcat6-log4j jboss enterprise web server 1 6.0.32-32_patch_09.ep5.el5
  • tomcat6-log4j jboss enterprise web server 1 6.0.32-35_patch_09.ep5.el6

red hat advisories RHSA-2013:0872RHSA-2013:0871RHSA-2013:0870RHSA-2013:0869

  • mariadb104 SLES for SAP 12 SP5, SLES 12 SP5, SLE Software Development Kit 12 SP5 10.4.30-8.5.46
  • lz4 SLES for SAP 12 SP5, SLES 12 SP5, SLE Software Development Kit 12 SP5 1.8.0-3.5.2
  • python-mysqlclient SLES for SAP 12 SP5, SLES 12 SP5, SLE Software Development Kit 12 SP5 1.3.14-8.9.2
  • mariadb-connector-c SLES for SAP 12 SP5, SLES 12 SP5, SLE Software Development Kit 12 SP5 3.1.22-2.35.1
  • mariadb104 SLES for SAP 15 SP1, SLES 15 SP1-LTSS, SLE High Performance Computing 15 SP1-LTSS 10.4.30-150100.3.5.10
  • python-mysqlclient SLES for SAP 15 SP1, SLES 15 SP1-LTSS, SLE High Performance Computing 15 SP1-LTSS 1.4.6-150100.3.3.7

suse advisories SUSE-RU-2023:4991-1SUSE-RU-2023:3956-1

  • mariadb openSUSE Tumbleweed 10.0.22-3.8
  • tomcat openSUSE Tumbleweed 8.0.36-3.3
  • tomcat10 openSUSE Tumbleweed 10.1.14-1.1

opensuse advisories openSUSE-SU-2024:10153-1openSUSE-SU-2024:10446-1openSUSE-SU-2024:13441-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2013-1976 updated cvss 6.9

tomcat: Improper TOMCAT_LOG management in init script (DoS, ACE)

  • Red Hat Enterprise Linux (v. 5 server) tomcat5 5.5.23-0jpp.40.el5_9, tomcat5-jasper 5.5.23-0jpp.40.el5_9, tomcat5-webapps 5.5.23-0jpp.40.el5_9, tomcat5-common-lib 5.5.23-0jpp.40.el5_9, tomcat5-server-lib 5.5.23-0jpp.40.el5_9, tomcat5-jsp-2.0-api 5.5.23-0jpp.40.el5_9, +5 more
    fixed: vendor fix RHSA-2013:0870
  • Red Hat Enterprise Linux Desktop Optional (v. 6) tomcat6 6.0.24-55.el6_4, tomcat6-lib 6.0.24-55.el6_4, tomcat6-javadoc 6.0.24-55.el6_4, tomcat6-webapps 6.0.24-55.el6_4, tomcat6-el-2.1-api 6.0.24-55.el6_4, tomcat6-docs-webapp 6.0.24-55.el6_4, +3 more Red Hat Enterprise Linux HPC Node Optional (v. 6) tomcat6 6.0.24-55.el6_4, tomcat6-lib 6.0.24-55.el6_4, tomcat6-javadoc 6.0.24-55.el6_4, tomcat6-webapps 6.0.24-55.el6_4, tomcat6-el-2.1-api 6.0.24-55.el6_4, tomcat6-docs-webapp 6.0.24-55.el6_4, +3 more Red Hat Enterprise Linux Server (v. 6) tomcat6 6.0.24-55.el6_4, tomcat6-lib 6.0.24-55.el6_4, tomcat6-el-2.1-api 6.0.24-55.el6_4, tomcat6-jsp-2.1-api 6.0.24-55.el6_4, tomcat6-servlet-2.5-api 6.0.24-55.el6_4 Red Hat Enterprise Linux Server Optional (v. 6) tomcat6 6.0.24-55.el6_4, tomcat6-javadoc 6.0.24-55.el6_4, tomcat6-webapps 6.0.24-55.el6_4, tomcat6-docs-webapp 6.0.24-55.el6_4, tomcat6-admin-webapps 6.0.24-55.el6_4 Red Hat Enterprise Linux Workstation (v. 6) tomcat6 6.0.24-55.el6_4, tomcat6-lib 6.0.24-55.el6_4, tomcat6-el-2.1-api 6.0.24-55.el6_4, tomcat6-jsp-2.1-api 6.0.24-55.el6_4, tomcat6-servlet-2.5-api 6.0.24-55.el6_4 Red Hat Enterprise Linux Workstation Optional (v. 6) tomcat6 6.0.24-55.el6_4, tomcat6-javadoc 6.0.24-55.el6_4, tomcat6-webapps 6.0.24-55.el6_4, tomcat6-docs-webapp 6.0.24-55.el6_4, tomcat6-admin-webapps 6.0.24-55.el6_4
    fixed: vendor fix RHSA-2013:0869
  • Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server tomcat5 5.5.33-33_patch_09.ep5.el5, tomcat6 6.0.32-32_patch_09.ep5.el5, tomcat6-lib 6.0.32-32_patch_09.ep5.el5, tomcat6-log4j 6.0.32-32_patch_09.ep5.el5, tomcat5-jasper 5.5.33-33_patch_09.ep5.el5, tomcat5-parent 5.5.33-33_patch_09.ep5.el5, +17 more Red Hat JBoss Enterprise Web Server 1 for RHEL 6 Server tomcat5 5.5.33-36_patch_09.ep5.el6, tomcat6 6.0.32-35_patch_09.ep5.el6, tomcat6-lib 6.0.32-35_patch_09.ep5.el6, tomcat6-log4j 6.0.32-35_patch_09.ep5.el6, tomcat5-jasper 5.5.33-36_patch_09.ep5.el6, tomcat5-parent 5.5.33-36_patch_09.ep5.el6, +17 more
    fixed: vendor fix RHSA-2013:0872
  • Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server tomcat7 7.0.30-5_patch_03.ep6.el5, tomcat6 6.0.35-12_patch_07.ep6.el5, tomcat7-lib 7.0.30-5_patch_03.ep6.el5, tomcat6-lib 6.0.35-12_patch_07.ep6.el5, tomcat7-log4j 7.0.30-5_patch_03.ep6.el5, tomcat6-log4j 6.0.35-12_patch_07.ep6.el5, +14 more Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server tomcat7 7.0.30-7_patch_03.ep6.el6, tomcat6 6.0.35-33_patch_07.ep6.el6, tomcat7-lib 7.0.30-7_patch_03.ep6.el6, tomcat6-lib 6.0.35-33_patch_07.ep6.el6, tomcat7-log4j 7.0.30-7_patch_03.ep6.el6, tomcat6-log4j 6.0.35-33_patch_07.ep6.el6, +14 more
    fixed: vendor fix RHSA-2013:0871

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

0.37% chance of exploitation in the next 30 days, higher than 31% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 2.0 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C

Classification

Weakness
  • CWE-59 Improper Link Resolution Before File Access

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.