Oval Definition:oval:com.ubuntu.xenial:def:201654250000000
Revision Date:2016-10-13Version:1
Title:CVE-2016-5425 on Ubuntu 16.04 LTS (xenial) - medium.
Description:The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distributions uses weak permissions for /usr/lib/tmpfiles.d/tomcat.conf, which allows local users to gain root privileges by leveraging membership in the tomcat group.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2016-5425
Platform(s):Ubuntu 16.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 16.04 LTS (xenial) is installed.
  • AND Package Information
  • NOT libservlet2.5-java package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT libservlet3.0-java package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT libtomcat7-java package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT tomcat7 package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT tomcat7-admin package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT tomcat7-common package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT tomcat7-examples package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT tomcat7-user package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT libservlet3.1-java package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT libtomcat8-java package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT tomcat8 package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT tomcat8-admin package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT tomcat8-common package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT tomcat8-examples package in xenial, while related to the CVE in some way, is not affected.
  • OR NOT tomcat8-user package in xenial, while related to the CVE in some way, is not affected.
  • BACK