medium6.8
CVE-2014-4929
Directory traversal vulnerability in the routing component in ownCloud Server before 5.0.17 and 6.0.x before 6.0.4 allows remote attackers to include and execu…
Impact
Directory traversal vulnerability in the routing component in ownCloud Server before 5.0.17 and 6.0.x before 6.0.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in a filename, related to index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Owncloud | Owncloud Server | Versions 6.0.0, 6.0.1, 6.0.2, 6.0.3, 5.0.0, 5.0.1 |
| Owncloud | Owncloud | through 5.0.16 |
Weakness classification
References
- NVD record
- CVE.org record
- http://advisories.mageia.org/MGASA-2014-0301.html
- http://owncloud.org/security/advisory/?id=oc-sa-2014-018
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:140
- http://www.securityfocus.com/bid/68975
- http://advisories.mageia.org/MGASA-2014-0301.html
- http://owncloud.org/security/advisory/?id=oc-sa-2014-018
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:140
- http://www.securityfocus.com/bid/68975