CVE:CVE-2012-4390
CNNVD:CNNVD-201209-011
ownCloud 4.0.7之前版本中的(1)apps/calendar/appinfo/remote.php和(2)apps/contacts/appinfo/remote.php中存在漏洞。远程认证用户可利用该漏洞通过未明向量枚举注册用户。
solution:Upgrade owncloud owncloud to a higher version than 4.0.6,3.0.0,3.0.1,3.0.2,3.0.3,4.0.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,and avoid the version (,4.0.6],3.0.0,3.0.1,3.0.2,3.0.3,4.0.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5