Oval Definition:
oval:com.ubuntu.artful:def:20130337000
Revision Date
:
2013-10-26
Version
:
1
Title
:
CVE-2013-0337 on Ubuntu 17.10 (artful) - low.
Description
:
The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the (1) access.log and (2) error.log files, which allows local users to obtain sensitive information by reading the files.
Family
:
unix
Class
:
vulnerability
Status
:
Reference(s)
:
CVE-2013-0337
Platform(s)
:
Ubuntu 17.10
Product(s)
:
Definition Synopsis
Ubuntu 17.10 (artful) is installed.
AND
The 'nginx' package in artful is affected and needs fixing.
BACK