PT-2014-2519 · Sabredav · Sabredav

Published 2014-03-14 · Updated 2022-05-14 · CVE-2013-1939

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions SabreDAV versions 1.6.8 and earlier, 1.7.x prior to 1.7.7, 1.8.x prior to 1.8.5

Description The issue arises from the HTMLBrowser plugin in SabreDAV, which does not properly check path separators in the base path when running on Windows. This allows remote attackers to read arbitrary files via a `` (backslash) character.

Recommendations For SabreDAV versions 1.6.8 and earlier, update to version 1.6.9 or later. For SabreDAV versions 1.7.x prior to 1.7.7, update to version 1.7.7 or later. For SabreDAV versions 1.8.x prior to 1.8.5, update to version 1.8.5 or later.

Exploit

Fix

RCE

Path traversal

Weakness Enumeration

CWE-20

CWE-22

Related Identifiers

CVE-2013-1939

GHSA-QG5V-JW6F-RPFJ

Affected Products

Sabredav

References · 8

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/sabre/dav/CVE-2013-1939.yaml · Exploit
• http://owncloud.org/about/security/advisories/oC-SA-2013-016 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-1939 · Security Note
• https://osv.dev/vulnerability/GHSA-qg5v-jw6f-rpfj · Vendor Advisory
• https://github.com/sabre-io/dav · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1939 · Note
• https://groups.google.com/forum/?fromgroups=#!topic/sabredav-discuss/ehOUu7wTSGQ · Note
• https://groups.google.com/forum/?fromgroups=#%21topic/sabredav-discuss/ehOUu7wTSGQ · Note