ownCloud CVE-2014-9047 Multiple Unspecified Security Vulnerabilities

Bugtraq ID:	71388
Class:	Unknown
CVE:	CVE-2014-9047
Remote:	Yes
Local:	No
Published:	Nov 25 2014 12:00AM
Updated:	Nov 25 2014 12:00AM
Credit:	Lukas Reschke - ownCloud Inc.
Vulnerable:	ownCloud ownCloud 7.0.2 ownCloud ownCloud 7.0.1 ownCloud ownCloud 7.0 ownCloud ownCloud 6.0.4 ownCloud ownCloud 6.0.1 ownCloud ownCloud 5.0.18 ownCloud ownCloud 5.0.11 ownCloud ownCloud 5.0.10 ownCloud ownCloud 5.0.8 ownCloud ownCloud 5.0.7 ownCloud ownCloud 5.0.6 ownCloud ownCloud 5.0.5 ownCloud ownCloud 5.0.4 ownCloud ownCloud 5.0.3 ownCloud ownCloud 5.0.1 ownCloud ownCloud 5.0 ownCloud ownCloud 4.5.13 ownCloud ownCloud 4.5.12 ownCloud ownCloud 4.5.11 ownCloud ownCloud 4.5.10 ownCloud ownCloud 4.5.9 ownCloud ownCloud 4.5.8 ownCloud ownCloud 4.5.7 ownCloud ownCloud 4.5.2 ownCloud ownCloud 4.5 ownCloud ownCloud 4.0.16 ownCloud ownCloud 4.0.15 ownCloud ownCloud 4.0.14 ownCloud ownCloud 4.0.13 ownCloud ownCloud 4.0.12 ownCloud ownCloud 4.0.9 ownCloud ownCloud 4.0.7 ownCloud ownCloud 4.0.6 ownCloud ownCloud 4.0.5 ownCloud ownCloud 4.0.4 ownCloud ownCloud 6.0.5 ownCloud ownCloud 6.0.3 ownCloud ownCloud 6.0.2 ownCloud ownCloud 6.0.0a ownCloud ownCloud 6.0.0 ownCloud ownCloud 5.0.9 ownCloud ownCloud 5.0.2 ownCloud ownCloud 5.0.17 ownCloud ownCloud 5.0.16 ownCloud ownCloud 5.0.15 ownCloud ownCloud 5.0.14 A ownCloud ownCloud 5.0.14 ownCloud ownCloud 5.0.13 ownCloud ownCloud 5.0.12 ownCloud ownCloud 4.5.6 ownCloud ownCloud 4.5.5 ownCloud ownCloud 4.5.4 ownCloud ownCloud 4.5.3 ownCloud ownCloud 4.5.1 ownCloud ownCloud 4.0.8 ownCloud ownCloud 4.0.3 ownCloud ownCloud 4.0.2 ownCloud ownCloud 4.0.11 ownCloud ownCloud 4.0.10 ownCloud ownCloud 4.0.1 ownCloud ownCloud 4.0.0 ownCloud ownCloud 3.0.3 ownCloud ownCloud 3.0.2 ownCloud ownCloud 3.0.1 ownCloud ownCloud 3.0.0
Not Vulnerable:	ownCloud ownCloud 7.0.3 ownCloud ownCloud 6.0.6

ownCloud CVE-2014-9047 Multiple Unspecified Security Vulnerabilities

ownCloud is prone to multiple unspecified security vulnerabilities.

Attackers can exploit these issues to gain sensitive information that may aid in launching further attacks.

Versions prior to ownCloud 7.0.3 and 6.0.6 are vulnerable.

ownCloud CVE-2014-9047 Multiple Unspecified Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

ownCloud CVE-2014-9047 Multiple Unspecified Security Vulnerabilities

References:

• ownCloud Homepage (ownCloud)
  
• Local file disclosure due to the preview system (oC-SA-2014-026) (Lukas Reschke)