Lucene search
Julien Cayssol – Vulnerability discovery and disclosure.OWNCLOUD:E4680E4346B605F3B06D7F3BF06327AFHistoryJul 10, 2012 - 5:14 p.m.
Code execution in /lib/migrate.php - ownCloud
2012-07-1017:14:39
Julien Cayssol – Vulnerability discovery and disclosure.
owncloud.org
29
0.005 Low
EPSS
Percentile
77.6%
Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.7 allows remote attackers to execute arbitrary code by uploading a crafted .htaccess file in an import.zip file and accessing an uploaded PHP file.
Affected Software
- ownCloud Server < 4.0.7 (CVE-2012-4389)
Action Taken
It is recommended that all instances are upgraded to ownCloud Server 4.0.7.
Acknowledgements
The ownCloud team thanks the following people for their research and responsible disclosure of the above advisory:
- Julien Cayssol - Vulnerability discovery and disclosure.
| CPE | Name | Operator | Version |
|---|---|---|---|
| owncloud server | lt | 4.0.7 |
Related
ubuntucve
ubuntucve
CVE-2012-4389
2012-09-05 00:00:00
cve
cve
CVE-2012-4389
2022-10-03 16:15:34
prion
prion
Design/Logic Flaw
2012-09-05 23:55:00
owncloud
owncloud
Server: Code execution in /lib/migrate.php
2012-07-10 11:42:22
nvd
nvd
CVE-2012-4389
2012-09-05 23:55:02
cvelist
cvelist
CVE-2012-4389
2022-10-03 16:15:34
openvas
openvas