Description

varnish 3.0.3 uses world-readable permissions for the /var/log/varnish/ directory and the log files in the directory, which allows local users to obtain sensitive information by reading the files. NOTE: some of these details are obtained from third party information.

Remediation

References

CVE-2013-0345

Related Vulnerabilities

MySQL CVE-2018-2766 Vulnerability (CVE-2018-2766)

Lodash Other Vulnerability (CVE-2019-10744)

WordPress Multiple Cross-Site Scripting Vulnerabilities (1.2 - 1.2.1)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-1834)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2019-9640)

Severity

Low

Classification

CVE-2013-0345 CWE-264

Tags

Missing Update Known Vulnerabilities