critical9.0
CVE-2015-4718
The external SMB storage driver in ownCloud Server before 6.0.8, 7.0.x before 7.0.6, and 8.0.x before 8.0.4 allows remote authenticated users to execute arbitr…
Impact
The external SMB storage driver in ownCloud Server before 6.0.8, 7.0.x before 7.0.6, and 8.0.x before 8.0.4 allows remote authenticated users to execute arbitrary SMB commands via a ; (semicolon) character in a file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Owncloud | Owncloud | through 6.0.7 |
| Owncloud | Owncloud Server | Versions 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.debian.org/security/2015/dsa-3373
- http://www.securityfocus.com/bid/76162
- https://owncloud.org/security/advisory/?id=oc-sa-2015-008
- http://www.debian.org/security/2015/dsa-3373
- http://www.securityfocus.com/bid/76162
- https://owncloud.org/security/advisory/?id=oc-sa-2015-008