CVE-2013-2039: Path Traversal
Published Mar 14, 2014
·Updated
Directory traversal vulnerability in lib/files/view.php in ownCloud before 4.0.15, 4.5.x 4.5.11, and 5.x before 5.0.6 allows remote authenticated users to access arbitrary files via unspecified vectors.
Affected Software
61 affected components
ownCloud ownCloud<=4.0.14
ownCloud ownCloud=4.0.0
ownCloud ownCloud=4.0.1
ownCloud ownCloud=4.0.2
ownCloud ownCloud=4.0.3
ownCloud ownCloud=4.0.4
ownCloud ownCloud=4.0.5
ownCloud ownCloud=4.0.6
ownCloud ownCloud=4.0.7
ownCloud ownCloud=4.0.8
ownCloud ownCloud=4.0.9
ownCloud ownCloud=4.0.10
ownCloud ownCloud=4.0.11
ownCloud ownCloud=4.0.12
ownCloud ownCloud=4.0.13
ownCloud ownCloud=4.5.1
ownCloud ownCloud=4.5.2
ownCloud ownCloud=4.5.3
ownCloud ownCloud=4.5.4
ownCloud ownCloud=4.5.5
ownCloud ownCloud=4.5.6
ownCloud ownCloud=4.5.7
ownCloud ownCloud=4.5.8
ownCloud ownCloud=4.5.9
ownCloud ownCloud=4.5.10
ownCloud ownCloud=5.0.0
ownCloud ownCloud=5.0.1
ownCloud ownCloud=5.0.2
ownCloud ownCloud=5.0.3
ownCloud ownCloud=5.0.4
ownCloud ownCloud=5.0.5
ownCloud ownCloud Server=4.0.0
ownCloud ownCloud Server=4.0.1
ownCloud ownCloud Server=4.0.2
ownCloud ownCloud Server=4.0.3
ownCloud ownCloud Server=4.0.4
ownCloud ownCloud Server=4.0.5
ownCloud ownCloud Server=4.0.6
ownCloud ownCloud Server=4.0.7
ownCloud ownCloud Server=4.0.8
ownCloud ownCloud Server=4.0.9
ownCloud ownCloud Server=4.0.10
ownCloud ownCloud Server=4.0.11
ownCloud ownCloud Server=4.0.12
ownCloud ownCloud Server=4.0.13
ownCloud ownCloud Server=4.5.1
ownCloud ownCloud Server=4.5.2
ownCloud ownCloud Server=4.5.3
ownCloud ownCloud Server=4.5.4
ownCloud ownCloud Server=4.5.5
ownCloud ownCloud Server=4.5.6
ownCloud ownCloud Server=4.5.7
ownCloud ownCloud Server=4.5.8
ownCloud ownCloud Server=4.5.9
ownCloud ownCloud Server=4.5.10
ownCloud ownCloud Server=5.0.0
ownCloud ownCloud Server=5.0.1
ownCloud ownCloud Server=5.0.2
ownCloud ownCloud Server=5.0.3
ownCloud ownCloud Server=5.0.4
ownCloud ownCloud Server=5.0.5
Remediation
Event History
Mar 14, 2014
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
via NVD·04:55 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-2039?
CVE-2013-2039 is classified as a medium severity vulnerability due to its potential for unauthorized access to sensitive files.
2
How do I fix CVE-2013-2039?
To mitigate CVE-2013-2039, upgrade to ownCloud version 4.0.15, 4.5.11, or 5.0.6 or later.
3
What type of attack does CVE-2013-2039 enable?
CVE-2013-2039 enables directory traversal attacks, allowing attackers to access arbitrary files on the server.
4
Who is affected by CVE-2013-2039?
Remote authenticated users of ownCloud versions prior to 4.0.15, 4.5.11, and 5.0.6 are affected by CVE-2013-2039.
5
What versions are vulnerable to CVE-2013-2039?
Vulnerable versions include ownCloud 4.0.0 through 4.0.14, 4.5.0 through 4.5.10, and 5.0.0 through 5.0.5.