CVE ID:	CVE-2013-1976
Description:	The (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of Tomcat for JBoss Enterprise Web Server 1.0.2 and 2.0.0, and Red Hat Enterprise Linux 5 and 6, allow local users to change the ownership of arbitrary files via a symlink attack on (a) tomcat5-initd.log, (b) tomcat6-initd.log, (c) catalina.out, or (d) tomcat7-initd.log.
Test IDs:	1.3.6.1.4.1.25623.1.0.871003   1.3.6.1.4.1.25623.1.1.4.2015.1337.1   1.3.6.1.4.1.25623.1.0.120087   1.3.6.1.4.1.25623.1.0.881741   1.3.6.1.4.1.25623.1.0.871000   1.3.6.1.4.1.25623.1.0.123618   1.3.6.1.4.1.25623.1.0.123619   1.3.6.1.4.1.25623.1.0.881740   1.3.6.1.4.1.25623.1.1.4.2013.1374.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1976 RHSA-2013:0869 http://rhn.redhat.com/errata/RHSA-2013-0869.html RHSA-2013:0870 http://rhn.redhat.com/errata/RHSA-2013-0870.html RHSA-2013:0871 http://rhn.redhat.com/errata/RHSA-2013-0871.html RHSA-2013:0872 http://rhn.redhat.com/errata/RHSA-2013-0872.html https://bugzilla.redhat.com/show_bug.cgi?id=927622 https://bugzilla.redhat.com/show_bug.cgi?id=927622 openSUSE-SU-2013:1306 http://lists.opensuse.org/opensuse-updates/2013-08/msg00013.html