Approved changes feed: RSS · Atom

cpe:2.3:a:apache:apache_commons_daemon:1.0.3:*:*:*:*:*:*:*

part: a version: 1.0.3 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductApache Commons Daemon (30698755-3ce0-5e22-8d63-3ce7f1b591c2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:apache/commons-daemon purl2cpe 2026-06-01 10:14:25.119909
pkg:github/apache/commons-daemon purl2cpe 2026-06-01 10:14:25.119912

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-2729 vulnerable 2026-06-08 04:58:08.924824 Details available
native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30 through 6.0.32, and 7.0.x before 7.0.20 on Linux, does not drop capabilities, which allows remote attackers to bypass read permissions for files via a request to an application.
Published: 2011-08-15T21:00:00.000Z
Updated: 2024-08-06T23:08:23.965Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2729 not_vulnerable 2026-06-08 04:58:08.922524 Details available
native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30 through 6.0.32, and 7.0.x before 7.0.20 on Linux, does not drop capabilities, which allows remote attackers to bypass read permissions for files via a request to an application.
Published: 2011-08-15T21:00:00.000Z
Updated: 2024-08-06T23:08:23.965Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.