CVE-2014-2044
ownCloud < 5.0 - Authenticated Remote Code Execution via Alternate Data Stream Filename Bypass
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2014-2044. PoCs published by Portcullis.
AI-analyzed exploit summary This exploit leverages Windows Alternate Data Streams (ADS) to bypass ownCloud's blacklist and upload a malicious .htaccess file, enabling PHP code execution. It requires authenticated access and targets Windows installations of ownCloud 4.0.x and 4.5.x.
Description
Incomplete blacklist vulnerability in ajax/upload.php in ownCloud before 5.0, when running on Windows, allows remote authenticated users to bypass intended access restrictions, upload files with arbitrary names, and execute arbitrary code via an Alternate Data Stream (ADS) syntax in the filename parameter, as demonstrated using .htaccess::$DATA to upload a PHP program.
Exploits (1)
This exploit leverages Windows Alternate Data Streams (ADS) to bypass ownCloud's blacklist and upload a malicious .htaccess file, enabling PHP code execution. It requires authenticated access and targets Windows installations of ownCloud 4.0.x and 4.5.x.