CVE-2015-4718 The external SMB storage driver in ownCloud Server before 6.0.8, 7.0.x before 7.0.6, and 8.0.x before 8.0.4 allows remote authenticated users to execute arbitrary SMB commands via a ; (semicolon) char...
HighCVSS 9.0
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The external SMB storage driver in ownCloud Server before 6.0.8, 7.0.x before 7.0.6, and 8.0.x before 8.0.4 allows remote authenticated users to execute arbitrary SMB commands via a ; (semicolon) character in a file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| owncloud | <= 6.0.7 | No fix listed |
| owncloud server | = 7.0.0 | No fix listed |
| owncloud server | = 7.0.1 | No fix listed |
| owncloud server | = 7.0.2 | No fix listed |
| owncloud server | = 7.0.3 | No fix listed |
| owncloud server | = 7.0.4 | No fix listed |
| owncloud server | = 7.0.5 | No fix listed |
| owncloud server | = 8.0.0 | No fix listed |
| owncloud server | = 8.0.2 | No fix listed |
| owncloud server | = 8.0.3 | No fix listed |
References
- DSA-3373 vendor-advisory
- 76162 vdb-entry
- owncloud.org vendor-advisory