7.2

CVE-2013-0347

Exploit
The Gentoo init script for webfs uses world-readable permissions for /var/log/webfsd.log, which allows local users to have unspecified impact by reading the file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Webfs ≫ Webfs Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.48% 0.378
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://osvdb.org/90585
http://seclists.org/oss-sec/2013/q1/404
Exploit
http://seclists.org/oss-sec/2013/q1/405
Exploit
http://seclists.org/oss-sec/2013/q1/415
Exploit
http://www.securityfocus.com/bid/58126
https://exchange.xforce.ibmcloud.com/vulnerabilities/82356