CVE-2014-3834

Published: 4 June 2014

ownCloud Server before 6.0.3 does not properly check permissions, which allows remote authenticated users to (1) access the contacts of other users via the address book or (2) rename files via unspecified vectors.

Notes

owncloud packages in Ubuntu are now empty

Status

References

• http://owncloud.org/about/security/advisories/oc-sa-2014-013/
• http://owncloud.org/about/security/advisories/oc-sa-2014-011/
• https://www.cve.org/CVERecord?id=CVE-2014-3834
• NVD
• Launchpad
• Debian