NVD

Id
36691  
Name
CVE-2013-0347  
Description
The Gentoo init script for webfs uses world-readable permissions for /var/log/webfsd.log, which allows local users to have unspecified impact by reading the file.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2014-11-16  
Modified Date
2014-11-17  
Seq
2013-0347  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
187532 36691 CVE-2013-0347 [oss-security] 20130222 CVE request: webfs world-readable log  View
187533 36691 CVE-2013-0347 [oss-security] 20130222 Re: CVE request: webfs world-readable log  View
187534 36691 CVE-2013-0347 [oss-security] 20130222 Re: Re: CVE request: webfs world-readable log  View
187535 36691 CVE-2013-0347 58126  View
187536 36691 CVE-2013-0347 webfs-webfsd-information-disclosure(82356)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25119 JVNDB-2013-006696 webfs 用 Gentoo init スクリプトにおける脆弱性 webfs 用 Gentoo init スクリプトには、/var/log/webfsd.log に対して誰でも読み取り可能な権限 (world-readable permission) を使用するため、不特定の影響を受ける脆弱性が存在します。 CVE-2013-0347 60289 CVE-2013-0347 36691 7.2 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006696.html 2013-02-22 2014-11-18 View