CVE-2013-0347

The Gentoo init script for webfs uses world-readable permissions for /var/log/webfsd.log, which allows local users to have unspecified impact by reading the file.

Score

CVSS 2.0 7.2 High

Status

Modified - secalert@redhat.com

Published

2014-11-16

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Webfs (Webfs)

References

• http://osvdb.org/90585
• http://seclists.org/oss-sec/2013/q1/404
• http://seclists.org/oss-sec/2013/q1/405
• http://seclists.org/oss-sec/2013/q1/415
• http://www.securityfocus.com/bid/58126
• https://exchange.xforce.ibmcloud.com/vulnerabilities/82356