LWN.net Logo

nginx: world accessible directories

Package(s):nginx CVE #(s):CVE-2013-0337
Created:March 5, 2013 Updated:March 6, 2013
Description: From the Red Hat bugzilla:

Agostino Sarubbo reported on the oss-security mailing list that, on Gentoo, /var/log/nginx is world-accessible and the log files inside the directory are world-readable. This could allow an unprivileged user to read the log files.

Alerts:
Fedora FEDORA-2013-2974 2013-03-04
Fedora FEDORA-2013-2955 2013-03-04

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds