PT-2014-2519 · Sabredav · Sabredav

Publicado 2014-03-14 · Atualizado 2022-05-14 · CVE-2013-1939

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions SabreDAV versions 1.6.8 and earlier, 1.7.x prior to 1.7.7, 1.8.x prior to 1.8.5

Description The issue arises from the HTMLBrowser plugin in SabreDAV, which does not properly check path separators in the base path when running on Windows. This allows remote attackers to read arbitrary files via a `` (backslash) character.

Recommendations For SabreDAV versions 1.6.8 and earlier, update to version 1.6.9 or later. For SabreDAV versions 1.7.x prior to 1.7.7, update to version 1.7.7 or later. For SabreDAV versions 1.8.x prior to 1.8.5, update to version 1.8.5 or later.

Exploit

Correção

RCE

Path traversal

Enumeração de Fraquezas

CWE-20

CWE-22

Identificadores relacionados

CVE-2013-1939

GHSA-QG5V-JW6F-RPFJ

Produtos afetados

Sabredav

Referências · 8

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/sabre/dav/CVE-2013-1939.yaml · Exploit
• https://github.com/sabre-io/dav · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1939 · Nota
• http://owncloud.org/about/security/advisories/oC-SA-2013-016 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-1939 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-qg5v-jw6f-rpfj · Aviso do Fabricante
• https://groups.google.com/forum/?fromgroups=#!topic/sabredav-discuss/ehOUu7wTSGQ · Nota
• https://groups.google.com/forum/?fromgroups=#%21topic/sabredav-discuss/ehOUu7wTSGQ · Nota