CVE-2004-1452

CVE-2004-1452 describes a local privilege escalation vulnerability in Gentoo Linux versions of Tomcat prior to 5.0.27-r3. The vulnerability arises because Tomcat init scripts, though owned by the tomcat user and group, are executed with root privileges. This misconfiguration allows local users belonging to the tomcat group to modify these scripts and execute arbitrary commands as root. With a CVSS score of 7.2, this vulnerability is considered high severity, indicating a local attack vector with low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. The EPSS and FAUCET scores are low, suggesting a minimal likelihood of exploitation in the wild. There is no evidence of active exploitation, nor is exploit code publicly available in Metasploit, Nuclei, or ExploitDB. Furthermore, there is no community discussion or media coverage surrounding this CVE, indicating a lack of widespread attention or exploitation.