CVE-2013-0348

Published: Dec 13, 2013Modified: Apr 29, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

thttpd.c in sthttpd before 2.26.4-r2 and thttpd 2.25b use world-readable permissions for /var/log/thttpd.log, which allows local users to obtain sensitive information by reading the file.

Affected (12)

Products: Open Source Development Team: Sthttpd · Fedoraproject: Fedora · Gentoo: Linux · +2 more

Show all products

Open Source Development Team: Sthttpd · Fedoraproject: Fedora · Gentoo: Linux · Opensuse: Opensuse · Acme: Thttpd

Open Source Development Team

1 product

1 product

1 product

1 product

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Open Source Development Team Sthttpd	Up to 2.26.4
Open Source Development Team Sthttpd	Version 2.26.1
Open Source Development Team Sthttpd	Version 2.26.2
Open Source Development Team Sthttpd	Version 2.26.3
Open Source Development Team Sthttpd	Version 2.26

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 17
Fedoraproject Fedora	Version 18
Gentoo Linux	All versions
Opensuse Opensuse	Version 12.2
Opensuse Opensuse	Version 12.3
Opensuse Opensuse	Version 13.1