Seafile Server Local Privilege Escalation Vulnerability (CVE-2014-5443)

Seafile Server Local Privilege Escalation Vulnerability (CVE-2014-5443)

Release date:
Updated on:

Affected Systems:
Seafile Server 3.1.1
Seafile Server 3.0.4
Description:
--------------------------------------------------------------------------------
Bugtraq id: 69360
CVE (CAN) ID: CVE-2014-5443
 
Seafile server is the next generation of open-source cloud storage.
 
In versions earlier than Seafile Server 3.1.2, the local permission escalation vulnerability exists. Local attackers can exploit this vulnerability to escalate their permissions on the affected computers.
 
<* Source: Kimmo Huoman

Link: http://seclists.org/oss-sec/2014/q3/443
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Seafile
-------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Http://seafile.com/home/

This article permanently updates the link address: