The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the (1) access.log and (2) error.log files, which allows local users to obtain sensitive information by reading the files.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the     (1) access.log and (2) error.log files, which allows local users to obtain sensitive information by     reading the files. (CVE-2013-0337)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x prior to 8.1.14 or 8.0.x prior to 8.1.14 or 8.1.x prior to 8.1.14 or 9.0.x prior to 9.0.7. It is, therefore, affected by a vulnerability.

  - The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable     permissions for the (1) access.log and (2) error.log files, which allows local users     to obtain sensitive information by reading the files. (CVE-2013-0337)   
  - os/unix/ngx_files.c in nginx before 1.10.1 and 1.11.x before 1.11.1 allows remote     attackers to cause a denial of service (NULL pointer dereference and worker process     crash) via a crafted request, involving writing a client request body to a temporary     file. (CVE-2016-4450)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its Server response header, the installed version of nginx is prior to or equal to 1.3.13. It is,  therefore, affected by a flaw related to creating and handling log files that allows information disclosure due to insecure filesystem permissions.

The remote host is affected by the vulnerability described in GLSA-201310-04 (nginx: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in nginx. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could send a specially crafted request, possibly       resulting in execution of arbitrary code with the privileges of the       process, or a Denial of Service condition. Furthermore, a       context-dependent attacker may be able to obtain sensitive information.
  Workaround :

    There is no known workaround at this time.

Make sure nginx directories are not world readable

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
254326	Linux Distros Unpatched Vulnerability : CVE-2013-0337	Nessus	Misc.	medium
136826	Palo Alto Networks PAN-OS 7.1.x < 8.1.14 / 8.0.x < 8.1.14 / 8.1.x < 8.1.14 / 9.0.x < 9.0.7 Vulnerability	Nessus	Palo Alto Local Security Checks	high
122612	nginx <= 1.3.13 Insecure Log Permissions	Nessus	Web Servers	high
70310	GLSA-201310-04 : nginx: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
64999	Fedora 17 : nginx-1.0.15-9.fc17 (2013-2955)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2013-0337

medium

Tenable Plugins

medium

high

high

high

high