CVE

Id
67087  
CVE No.
CVE-2013-7140  
Status
Candidate  
Description
XML External Entity (XXE) vulnerability in the CalDAV interface in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows remote authenticated users to read portions of arbitrary files via vectors related to the SAX builder and the WebDAV interface. NOTE: this issue has been labeled as both absolute path traversal and XXE, but the root cause may be XXE, since XXE can be exploited to conduct absolute path traversal and other attacks.  
Phase
Assigned (20131218)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
648251 67087 CVE-2013-7140 BUGTRAQ:20140117 Open-Xchange Security Advisory 2014-01-17  View
648252 67087 CVE-2013-7140 URL:http://seclists.org/bugtraq/2014/Jan/57  View
648253 67087 CVE-2013-7140 BID:65015  View
648254 67087 CVE-2013-7140 URL:http://www.securityfocus.com/bid/65015  View
648255 67087 CVE-2013-7140 OSVDB:102194  View
648256 67087 CVE-2013-7140 URL:http://www.osvdb.org/102194  View
648257 67087 CVE-2013-7140 SECTRACK:1029650  View
648258 67087 CVE-2013-7140 URL:http://www.securitytracker.com/id/1029650  View
648259 67087 CVE-2013-7140 XF:openxchange-cve20137140-info-disclosure(90543)  View

Related JVN