CVE-2013-7344

Published: 24 March 2014

Unspecified vulnerability in core/settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.6 allows remote authenticated users to execute arbitrary PHP code via unknown vectors. NOTE: this issue was SPLIT from CVE-2013-0303 due to different affected versions.

Priority

Status

Package	Release	Status
owncloud Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Not vulnerable (5.0.4debian-0ubuntu1~ubuntu12.04)
	quantal	Not vulnerable
	saucy	Not vulnerable
	upstream	Needs triage

References

http://owncloud.org/about/security/advisories/oC-SA-2013-006/
https://www.cve.org/CVERecord?id=CVE-2013-7344
NVD
Launchpad
Debian

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.