{"attribution":"This product uses data from the NVD API but is not endorsed or certified by the NVD.","cve":{"id":"CVE-2013-0348","sourceIdentifier":"secalert@redhat.com","published":"2013-12-13T18:07:54.030","lastModified":"2026-06-16T23:49:16.653","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"thttpd.c in sthttpd before 2.26.4-r2 and thttpd 2.25b use world-readable permissions for /var/log/thttpd.log, which allows local users to obtain sensitive information by reading the file."},{"lang":"es","value":"thttpd.c en sthttpd antes de 2.26.4-r2 y  httpd 2.25b usa permisos de lectura universales para / var / log / thttpd.log, lo que permite a usuarios locales obtener información sensible mediante la lectura del archivo."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_team:sthttpd:*:*:*:*:*:*:*:*","versionEndIncluding":"2.26.4","matchCriteriaId":"6EA0E93E-A736-46D7-AAC2-45BFF5A7E930"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_team:sthttpd:2.26:*:*:*:*:*:*:*","matchCriteriaId":"59DEBF22-0ADA-46AE-B49B-11FD03375977"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_team:sthttpd:2.26.1:*:*:*:*:*:*:*","matchCriteriaId":"5B6CB6C8-F481-4EF6-84BD-5FB633B1BA35"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_team:sthttpd:2.26.2:*:*:*:*:*:*:*","matchCriteriaId":"E324EB10-B92D-446C-AD10-86704B9FA334"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_team:sthttpd:2.26.3:*:*:*:*:*:*:*","matchCriteriaId":"D400EF65-EEF4-464E-BE34-147EA8DEAEEE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:17:*:*:*:*:*:*:*","matchCriteriaId":"2DA9D861-3EAF-42F5-B0B6-A4CD7BDD6188"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:18:*:*:*:*:*:*:*","matchCriteriaId":"E14271AE-1309-48F3-B9C6-D7DEEC488279"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"647BA336-5538-4972-9271-383A0EC9378E"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*","matchCriteriaId":"D806A17E-B8F9-466D-807D-3F1E77603DC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*","matchCriteriaId":"DFBF430B-0832-44B0-AA0E-BA9E467F7668"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acme:thttpd:2.25:b:*:*:*:*:*:*","matchCriteriaId":"E8437876-9C0D-4621-BB0F-2449B706C640"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00050.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00015.html","source":"secalert@redhat.com"},{"url":"http://opensource.dyc.edu/gitweb/?p=sthttpd.git%3Ba=commitdiff%3Bh=d2e186dbd58d274a0dea9b59357edc8498b5388d","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2013/02/23/7","source":"secalert@redhat.com"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=458896","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=924857","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00050.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://opensource.dyc.edu/gitweb/?p=sthttpd.git%3Ba=commitdiff%3Bh=d2e186dbd58d274a0dea9b59357edc8498b5388d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2013/02/23/7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=458896","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=924857","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}