{
  "modified": "2025-08-09T19:01:27Z",
  "published": "2013-10-27T00:55:03Z",
  "id": "CVE-2013-0337",
  "details": "The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the (1) access.log and (2) error.log files, which allows local users to obtain sensitive information by reading the files.",
  "references": [
    {
      "type": "ADVISORY",
      "url": "http://secunia.com/advisories/55181"
    },
    {
      "type": "ADVISORY",
      "url": "http://security.gentoo.org/glsa/glsa-201310-04.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2013/02/21/15"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2013/02/22/1"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2013/02/24/1"
    }
  ]
}