UpHeron
All vulnerabilities

Servers and applications

CVE-2013-0337

The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the (1) access.log and (2) error.log files, which allows local users to obtain sensitive information by reading the files.

Severity
High 7.5
Published
27 Oct 2013
Last changed
16 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
nginxServers and applications · cpe:a:f5:nginx
  • Version 1.3.12
  • Version 1.3.11
  • Version 1.3.10
  • Version 1.3.9
All 51 release lines
  • Every version up to 1.3.13
  • Version 1.0.0
  • Version 1.0.1
  • Version 1.0.2
  • Version 1.0.3
  • Version 1.0.4
  • Version 1.0.5
  • Version 1.0.6
  • Version 1.0.7
  • Version 1.0.8
  • Version 1.0.9
  • Version 1.0.10
  • Version 1.0.11
  • Version 1.0.12
  • Version 1.0.13
  • Version 1.0.14
  • Version 1.0.15
  • Version 1.1.0
  • Version 1.1.1
  • Version 1.1.2
  • Version 1.1.3
  • Version 1.1.4
  • Version 1.1.5
  • Version 1.1.6
  • Version 1.1.7
  • Version 1.1.8
  • Version 1.1.9
  • Version 1.1.10
  • Version 1.1.11
  • Version 1.1.12
  • Version 1.1.13
  • Version 1.1.14
  • Version 1.1.15
  • Version 1.1.16
  • Version 1.1.17
  • Version 1.1.18
  • Version 1.1.19
  • Version 1.2.0
  • Version 1.3.0
  • Version 1.3.1
  • Version 1.3.2
  • Version 1.3.3
  • Version 1.3.4
  • Version 1.3.5
  • Version 1.3.6
  • Version 1.3.7
  • Version 1.3.8
  • Version 1.3.9
  • Version 1.3.10
  • Version 1.3.11
  • Version 1.3.12

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2013-0337
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2013-0337