CVE-2013-0348

Fixed in a distro release EPSS <1%

thttpd.c in sthttpd before 2.26.4-r2 and thttpd 2.25b use world-readable permissions for /var/log/thttpd.log, which allows local users to obtain sensitive information by reading the file.

Published 2013-12-13 · CVE record · OSV

Products: open_source_development_team sthttpd, fedoraproject fedora, gentoo linux, opensuse, acme thttpd

Distro releases