CVE-2013-0345
varnish 3.0.3 uses world-readable permissions for the /var/log/varnish/ directory and the log files in the directory, which allows local users to obtain sensitive information by reading the files. NOTE: some of these details are obtained from third party information.
View on NVDSeverity
N/A
EPSS
Probability of exploitation (next 30 days): 0.0005 (0.0%)
Percentile: 14.3%
EPSS: 2026-05-06
Affects
varnish_cache_project:varnish_cacheTechnical description
varnish 3.0.3 uses world-readable permissions for the /var/log/varnish/ directory and the log files in the directory, which allows local users to obtain sensitive information by reading the files. NOTE: some of these details are obtained from third party information.
Published: 5/8/2014, 2:29:08 PM
Last modified: 5/6/2026, 10:30:45 PM
References
- http://www.openwall.com/lists/oss-security/2013/02/22/14
- http://www.openwall.com/lists/oss-security/2013/02/23/4
- http://www.osvdb.org/90586
- http://www.securityfocus.com/bid/58125
- http://www.openwall.com/lists/oss-security/2013/02/22/14
- http://www.openwall.com/lists/oss-security/2013/02/23/4
- http://www.osvdb.org/90586
- http://www.securityfocus.com/bid/58125