CVE-2013-0345

🗓️ 08 May 2014 14:00:00Reported by redhatType

cve

cve🔗 web.nvd.nist.gov👁 55 Views🌐 WEB

Varnish 3.0.3 world-readable permissions for /var/log/varnish

Reporter	Title	Published	Views	Family All 22
Amazon	Medium: varnish	14 Jan 201400:00	–	amazon
Tenable Nessus	Amazon Linux AMI : varnish (ALAS-2014-276)	5 Feb 201400:00	–	nessus
Tenable Nessus	Fedora 20 : varnish-3.0.5-1.fc20 (2013-24018)	6 May 201400:00	–	nessus
Tenable Nessus	Fedora 19 : varnish-3.0.5-1.fc19 (2013-24023)	6 May 201400:00	–	nessus
Tenable Nessus	GLSA-201412-30 : Varnish: Multiple vulnerabilities	16 Dec 201400:00	–	nessus
Cvelist	CVE-2013-0345	8 May 201414:00	–	cvelist
Debian CVE	CVE-2013-0345	8 May 201414:00	–	debiancve
EUVD	EUVD-2013-0356	7 Oct 202500:30	–	euvd
Fedora	[SECURITY] Fedora 20 Update: varnish-3.0.5-1.fc20	6 May 201403:41	–	fedora
Fedora	[SECURITY] Fedora 19 Update: varnish-3.0.5-1.fc19	6 May 201403:30	–	fedora

NVD

Node

varnish_cache_project varnish_cacheMatch3.0.3

Source	Link
osvdb	www.osvdb.org/90586
openwall	www.openwall.com/lists/oss-security/2013/02/23/4
securityfocus	www.securityfocus.com/bid/58125
openwall	www.openwall.com/lists/oss-security/2013/02/22/14

Parameter	Position	Path	Description	CWE
/var/log/varnish/	path	/var/log/varnish/	Local information disclosure due to world-readable permissions on /var/log/varnish directory and log files, allowing local users to read sensitive logs.	CWE-264

16 Jun 2026 23:49Current

5.6Medium risk

Vulners AI Score5.6

CVSS 22.1

EPSS0.00374

cve-2013-0345 varnish 3.0.3 sensitive information world-readable permissions nvd security vulnerability