CVE-2013-0337 | BDVDB-2026-58206 Detail

Description#

The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the (1) access.log and (2) error.log files, which allows local users to obtain sensitive information by reading the files.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/55181
http://www.openwall.com/lists/oss-security/2013/02/24/1
http://www.openwall.com/lists/oss-security/2013/02/22/1
http://security.gentoo.org/glsa/glsa-201310-04.xml
http://www.openwall.com/lists/oss-security/2013/02/21/15

Exploit#

No public exploit known

History#

Version 12013-10-27Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.