oss-sec mailing list archives

CVE request: varnish world-readable logdir


From: Agostino Sarubbo <ago () gentoo org>
Date: Fri, 22 Feb 2013 13:55:51 +0100

Hello, varnish[1], an high-performance HTTP accelerator, has a world-readable 
log/logdir. Please assign a CVE


# ls -la /var/log/varnish/    
total 8                                                                                                                 
                                                            
drwxr-xr-x 2 root root 4096 Feb 22 13:48 .                                                                              
                                                            
drwxr-xr-x 8 root root 4096 Feb 22 13:50 ..                                                                             
                                                            
-rw-r--r-- 1 root root    0 Feb 22 13:48 access.log   


[1]: https://www.varnish-cache.org/

-- 
Agostino Sarubbo
Gentoo Linux Developer


Current thread: