ALT-PU-2014-3207

Высокий

ALT-PU-2014-3207: package owncloud update to version 5.0.14a-alt1

Источник

errata.altlinux.org

Дата публикации

15.01.2014

Дата обновления

15.01.2014

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades owncloud to version 5.0.14a-alt1.

Устраненные уязвимости7

CVE-2014-2049

Средний 5

Дата публикации: 14.03.2014

CWE-264

The default Flash Cross Domain policies in ownCloud before 5.0.15 and 6.x before 6.0.2 allows remote attackers to access user files via unspecified vectors.

CVSS 2.0

Средний 5

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: None
Availability: None

Ссылки

CVE-2014-2049 https://nvd.nist.gov/vuln/detail/CVE-2014-2049

Ссылки4

ALT-PU-2014-3207 https://errata.altlinux.org/ALT-PU-2014-3207

GHSA-28rm-rj57-qjpv

https://github.com/advisories/GHSA-28rm-rj57-qjpv

GHSA-5v43-55m5-qr8f

https://github.com/advisories/GHSA-5v43-55m5-qr8f

GHSA-qm4x-ch5w-gr62

https://github.com/advisories/GHSA-qm4x-ch5w-gr62

Связанные уязвимости

ALT-PU-2014-3209

CVSS3: 9.8

altlinux

больше 12 лет назад

ALT-PU-2014-3209: package `owncloud` update to version 6.0.3-alt1

CVE-2014-2049

ubuntu

больше 12 лет назад

The default Flash Cross Domain policies in ownCloud before 5.0.15 and 6.x before 6.0.2 allows remote attackers to access user files via unspecified vectors.

CVE-2014-2049

nvd

больше 12 лет назад

The default Flash Cross Domain policies in ownCloud before 5.0.15 and 6.x before 6.0.2 allows remote attackers to access user files via unspecified vectors.

CVE-2014-2049

debian

больше 12 лет назад

The default Flash Cross Domain policies in ownCloud before 5.0.15 and ...

GHSA-rg62-9hqw-v3x4

github

больше 4 лет назад

The default Flash Cross Domain policies in ownCloud before 5.0.15 and 6.x before 6.0.2 allows remote attackers to access user files via unspecified vectors.