oss-sec mailing list archives

CVE request: webfs world-readable log

From: Agostino Sarubbo <ago () gentoo org>
Date: Fri, 22 Feb 2013 14:04:54 +0100

Hello,

webfs[1], a Lightweight HTTP server for static content creates its log with 
world-readable permission:

# ls /var/log/webfsd.log -la
-rw-r--r-- 1 root root 0 Feb 22 14:02 /var/log/webfsd.log

Please assign a CVE.
-- 
Agostino Sarubbo
Gentoo Linux Developer

Current thread:

CVE request: webfs world-readable log Agostino Sarubbo (Feb 22)
- Re: CVE request: webfs world-readable log Agostino Sarubbo (Feb 22)
  - Re: Re: CVE request: webfs world-readable log Kurt Seifried (Feb 22)