Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2006-3695HistoryJul 21, 2006 - 2:03 p.m.
CVE-2006-3695
2006-07-2114:03:00
Debian Security Bug Tracker
security-tracker.debian.org
9
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.037
Percentile
91.8%
Trac before 0.9.6 does not disable the “raw” or “include” commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers to read arbitrary files, perform cross-site scripting (XSS) attacks, or cause a denial of service via unspecified vectors. NOTE: this might be related to CVE-2006-3458.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | trac | < 0.9.6-1 | trac_0.9.6-1_all.deb |
| Debian | 13 | all | trac | < 0.9.6-1 | trac_0.9.6-1_all.deb |
Related
nvd
nvd
cve
cve
osv
osv
PYSEC-2006-2
2006-07-21 14:03:00
zope2.7 - programming error
2006-07-18 00:00:00
github
github
Trac reStructuredText breach of privacy and denial of service vulnerability
2022-05-01 07:11:38
cvelist
cvelist
ubuntucve
ubuntucve
openvas
openvas
FreeBSD Ports: zope
2008-09-04 00:00:00
Debian: Security Advisory (DSA-1113)
2008-01-17 00:00:00
Ubuntu: Security Advisory (USN-317-1)
2022-08-26 00:00:00
nessus
nessus
FreeBSD : zope -- information disclosure vulnerability (5f2a0c40-1322-11db-bd23-000475abc56f)
2006-07-17 00:00:00
Ubuntu 5.10 : zope2.8 vulnerability (USN-317-1)
2007-11-10 00:00:00
Debian DSA-1113-1 : zope2.7 - programming error
2006-10-14 00:00:00
freebsd
freebsd
zope -- information disclosure vulnerability
2006-07-05 00:00:00
ubuntu
ubuntu
zope2.8 vulnerability
2006-07-13 00:00:00
debian
debian
[SECURITY] [DSA 1113-1] New zope2.7 packages fix information disclosure
2006-07-18 21:22:08
[SECURITY] [DSA 1152-1] New trac packages fix information disclosure
2006-08-18 09:19:29
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.037
Percentile
91.8%
Related for DEBIANCVE:CVE-2006-3695