CVE-2014-2055

Published: Jun 4, 2014Modified: May 6, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SabreDAV before 1.7.11, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.

Affected (49)

Products: Owncloud: Owncloud Server · Fruux: Sabredav

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Owncloud Owncloud Server	Version 6.0.0
Owncloud Owncloud Server	Version 6.0.1

Configuration B

47 vulnerable

Vulnerable Software	Affected Versions
Fruux Sabredav	Up to 1.7.10
Fruux Sabredav	Version 1.6.0
Fruux Sabredav	Version 1.6.10
Fruux Sabredav	Version 1.6.1
Fruux Sabredav	Version 1.6.2
Fruux Sabredav	Version 1.6.3
Fruux Sabredav	Version 1.6.4
Fruux Sabredav	Version 1.6.5
Fruux Sabredav	Version 1.6.6
Fruux Sabredav	Version 1.6.7
Fruux Sabredav	Version 1.6.8
Fruux Sabredav	Version 1.6.9
Fruux Sabredav	Version 1.7.0
Fruux Sabredav	Version 1.7.1
Fruux Sabredav	Version 1.7.2
Fruux Sabredav	Version 1.7.3
Fruux Sabredav	Version 1.7.4
Fruux Sabredav	Version 1.7.5
Fruux Sabredav	Version 1.7.6
Fruux Sabredav	Version 1.7.7
Fruux Sabredav	Version 1.7.8
Fruux Sabredav	Version 1.7.9
Fruux Sabredav	Version 1.8.0
Fruux Sabredav	Version 1.8.1
Fruux Sabredav	Version 1.8.2
Fruux Sabredav	Version 1.8.3
Fruux Sabredav	Version 1.8.4
Fruux Sabredav	Version 1.8.5
Fruux Sabredav	Version 1.8.6
Fruux Sabredav	Version 1.8.7
Fruux Sabredav	Version 1.8.9
Owncloud Owncloud Server	Up to 5.0.14
Owncloud Owncloud Server	Version 5.0.0
Owncloud Owncloud Server	Version 5.0.10
Owncloud Owncloud Server	Version 5.0.11
Owncloud Owncloud Server	Version 5.0.12
Owncloud Owncloud Server	Version 5.0.13
Owncloud Owncloud Server	Version 5.0.14
Owncloud Owncloud Server	Version 5.0.1
Owncloud Owncloud Server	Version 5.0.2
Owncloud Owncloud Server	Version 5.0.3
Owncloud Owncloud Server	Version 5.0.4
Owncloud Owncloud Server	Version 5.0.5
Owncloud Owncloud Server	Version 5.0.6
Owncloud Owncloud Server	Version 5.0.7
Owncloud Owncloud Server	Version 5.0.8
Owncloud Owncloud Server	Version 5.0.9

References (4)

http://owncloud.org/about/security/advisories/oC-SA-2014-006/

Source: cve@mitre.org

Vendor Advisory

https://github.com/fruux/sabre-dav/releases/tag/1.7.11

Source: cve@mitre.org

http://owncloud.org/about/security/advisories/oC-SA-2014-006/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://github.com/fruux/sabre-dav/releases/tag/1.7.11

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.