CVE-2013-0347

Published: Nov 16, 2014Modified: May 6, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

The Gentoo init script for webfs uses world-readable permissions for /var/log/webfsd.log, which allows local users to have unspecified impact by reading the file.

Affected (1)

Products: Webfs: Webfs

Webfs

1 product

Webfs

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Webfs Webfs	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (12)

http://osvdb.org/90585

Source: secalert@redhat.com

http://seclists.org/oss-sec/2013/q1/404

Source: secalert@redhat.com

Exploit

http://seclists.org/oss-sec/2013/q1/405

Source: secalert@redhat.com

Exploit

http://seclists.org/oss-sec/2013/q1/415

Source: secalert@redhat.com

Exploit

http://www.securityfocus.com/bid/58126

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/82356

Source: secalert@redhat.com

http://osvdb.org/90585