Lucene search
Ubuntu.comUB:CVE-2013-0345HistoryMay 08, 2014 - 12:00 a.m.
CVE-2013-0345
2014-05-0800:00:00
ubuntu.com
ubuntu.com
8
0.0004 Low
EPSS
Percentile
5.2%
varnish 3.0.3 uses world-readable permissions for the /var/log/varnish/
directory and the log files in the directory, which allows local users to
obtain sensitive information by reading the files. NOTE: some of these
details are obtained from third party information.
Notes
| Author | Note |
|---|---|
| jdstrand | /var/log/varnish is 750 in Ubuntu 11.10 and higher |
Related
cve
cve
CVE-2013-0345
2014-05-08 14:29:08
prion
prion
Information disclosure
2014-05-08 14:29:00
cvelist
cvelist
CVE-2013-0345
2014-05-08 14:00:00
debiancve
debiancve
CVE-2013-0345
2014-05-08 14:29:08
nessus
nessus
Fedora 20 : varnish-3.0.5-1.fc20 (2013-24018)
2014-05-06 00:00:00
GLSA-201412-30 : Varnish: Multiple vulnerabilities
2014-12-16 00:00:00
Amazon Linux AMI : varnish (ALAS-2014-276)
2014-02-05 00:00:00
openvas
openvas
Fedora Update for varnish FEDORA-2013-24023
2014-05-12 00:00:00
Fedora Update for varnish FEDORA-2013-24018
2014-05-12 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-276)
2015-09-08 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: varnish-3.0.5-1.fc19
2014-05-06 03:30:29
[SECURITY] Fedora 20 Update: varnish-3.0.5-1.fc20
2014-05-06 03:41:15
amazon
amazon
Medium: varnish
2014-01-14 16:09:00
gentoo
gentoo
Varnish: Multiple vulnerabilities
2014-12-15 00:00:00