Unscored severity · published May 8, 2014
CVE-2013-0345
varnish 3.0.3 uses world-readable permissions for the /var/log/varnish/ directory and the log files in the directory, which allows local users to obtain sensitive information by…
–
CVSS
0.4%
EPSS
No
On KEV
Description
varnish 3.0.3 uses world-readable permissions for the /var/log/varnish/ directory and the log files in the directory, which allows local users to obtain sensitive information by reading the files. NOTE: some of these details are obtained from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VC
Varnish Cache · Varnish Cache Project
3.0.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-0345
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-0345
www.openwall.com
http://www.openwall.com/lists/oss-security/2013/02/22/14
www.openwall.com
http://www.openwall.com/lists/oss-security/2013/02/23/4
www.osvdb.org
http://www.osvdb.org/90586
www.securityfocus.com
http://www.securityfocus.com/bid/58125
More from Varnish Cache
9.1
CVE-2022-23959
In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r6 and 6.0.x before 6.0.9r4,…
9.1
CVE-2017-8807
vbf_stp_error in bin/varnishd/cache/cache_fetch.c in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1 allows remote attackers to obtain sensitive information from…
7.5
CVE-2022-45060
An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1
7.5
CVE-2022-45059
An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1
7.5
CVE-2022-38150
In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forged HTTP/1 backend responses