ownCloud CVE-2013-1850 Multiple Security Bypass Vulnerabilities

Bugtraq ID:	58481
Class:	Design Error
CVE:	CVE-2013-1850
Remote:	Yes
Local:	No
Published:	Mar 13 2013 12:00AM
Updated:	Mar 13 2013 12:00AM
Credit:	The vendor reported these issues.
Vulnerable:	ownCloud ownCloud 4.5.7 ownCloud ownCloud 4.5.2 ownCloud ownCloud 4.5 ownCloud ownCloud 4.0.12 ownCloud ownCloud 4.0.9 ownCloud ownCloud 4.0.7 ownCloud ownCloud 4.0.6 ownCloud ownCloud 4.0.5 ownCloud ownCloud 4.0.4 ownCloud ownCloud 4.5.6 ownCloud ownCloud 4.5.5 ownCloud ownCloud 4.0.3 ownCloud ownCloud 4.0.2 ownCloud ownCloud 4.0.11 ownCloud ownCloud 4.0.10 ownCloud ownCloud 4.0.1
Not Vulnerable:	ownCloud ownCloud 4.5.8 ownCloud ownCloud 4.0.13

ownCloud CVE-2013-1850 Multiple Security Bypass Vulnerabilities

Attackers can use a browser to exploit these issues.

ownCloud CVE-2013-1850 Multiple Security Bypass Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

ownCloud CVE-2013-1850 Multiple Security Bypass Vulnerabilities

References:

• Contacts: Bypass of file blacklist (oC-SA-2013-009) (ownCloud )
  
• ownCloud Homepage (ownCloud)
  
• ownCloud Security Advisories (2013-008, 2013-009, 2013-010) (Lukas Reschke)