Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2006-3695
HistoryJul 21, 2006 - 2:03 p.m.

CVE-2006-3695

2006-07-2114:03:00
[email protected]
web.nvd.nist.gov

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.2 Medium

AI Score

Confidence

High

0.037 Low

EPSS

Percentile

91.8%

JSON

Trac before 0.9.6 does not disable the “raw” or “include” commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers to read arbitrary files, perform cross-site scripting (XSS) attacks, or cause a denial of service via unspecified vectors. NOTE: this might be related to CVE-2006-3458.

Affected configurations

NVD
Node
edgewall_softwaretracRange≤0.9.5

Related

cvelist 3
osv 2
github 1
ubuntucve 3
debiancve 1
cve 3
openvas 7
freebsd 1
nessus 4
debian 2
nvd 2
ubuntu 1
cvelist
cvelist
CVE-2006-3695
2006-07-19 01:00:00
CVE-2006-3458
2006-07-07 23:00:00
CVE-2006-4684
2006-09-19 18:00:00
osv
osv
PYSEC-2006-2
2006-07-21 14:03:00
zope2.7 - programming error
2006-07-18 00:00:00
github
github
Trac reStructuredText breach of privacy and denial of service vulnerability
2022-05-01 07:11:38
ubuntucve
ubuntucve
CVE-2006-3695
2006-07-21 00:00:00
CVE-2006-3458
2006-07-07 00:00:00
CVE-2006-4684
2006-09-19 00:00:00
debiancve
debiancve
CVE-2006-3695
2006-07-21 14:03:00
cve
cve
CVE-2006-3695
2006-07-21 14:03:00
CVE-2006-3458
2006-07-07 23:05:00
CVE-2006-4684
2006-09-19 18:07:00
openvas
openvas
FreeBSD Ports: zope
2008-09-04 00:00:00
Debian Security Advisory DSA 1113-1 (zope2.7)
2008-01-17 00:00:00
Ubuntu: Security Advisory (USN-317-1)
2022-08-26 00:00:00
freebsd
freebsd
zope -- information disclosure vulnerability
2006-07-05 00:00:00
nessus
nessus
Ubuntu 5.10 : zope2.8 vulnerability (USN-317-1)
2007-11-10 00:00:00
Debian DSA-1113-1 : zope2.7 - programming error
2006-10-14 00:00:00
FreeBSD : zope -- information disclosure vulnerability (5f2a0c40-1322-11db-bd23-000475abc56f)
2006-07-17 00:00:00
debian
debian
[SECURITY] [DSA 1113-1] New zope2.7 packages fix information disclosure
2006-07-18 21:22:08
[SECURITY] [DSA 1152-1] New trac packages fix information disclosure
2006-08-18 09:19:29
nvd
nvd
CVE-2006-3458
2006-07-07 23:05:00
CVE-2006-4684
2006-09-19 18:07:00
ubuntu
ubuntu
zope2.8 vulnerability
2006-07-13 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.2 Medium

AI Score

Confidence

High

0.037 Low

EPSS

Percentile

91.8%

JSON
Related for NVD:CVE-2006-3695
cvelist3osv2github1ubuntucve3debiancve1cve3openvas7freebsd1nessus4debian2nvd2ubuntu1