Back to list
*Note: Email address will appear as "user domain ext" to prevent harvesting.
CVE-2016-1240 - Tomcat packaging on Debian-based distros - Local Root Privilege Escalation
Oct 26 2016 05:05AM
Dawid Golunski (dawid legalhackers com)
I added a simple PoC video for the CVE-2016-1240 vulnerability.
In the PoC I used Ubuntu 16.04 with the latest tomcat7 package
(version: 7.0.68-ubuntu-0.1) installed from the default ubuntu repos
which appears vulnerable still.
The video poc can be found at:
[ more ]
Copyright 2010, SecurityFocus