CVE-2013-0348 in openSUSE
Summary
thttpd.c in sthttpd before 2.26.4-r2 and thttpd 2.25b use world-readable permissions for /var/log/thttpd.log, which allows local users to obtain sensitive information by reading the file.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
12/06/2012
Disclosure
12/13/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 65744 | Novell openSUSE thttpd.c access control | 264 | Not defined | Official fix | CVE-2013-0348 |