Lucene search

K
nvd[email protected]NVD:CVE-2006-4684
HistorySep 19, 2006 - 6:07 p.m.

CVE-2006-4684

2006-09-1918:07:00
web.nvd.nist.gov
3

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.009

Percentile

83.2%

The docutils module in Zope (Zope2) 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with reStructuredText (reST) markup, which allows remote attackers to read arbitrary files via a csv_table directive, a different vulnerability than CVE-2006-3458.

Affected configurations

Nvd
Node
zopezopeMatch2.7.0
OR
zopezopeMatch2.7.1
OR
zopezopeMatch2.7.2
OR
zopezopeMatch2.7.3
OR
zopezopeMatch2.7.4
OR
zopezopeMatch2.7.5
OR
zopezopeMatch2.7.6
OR
zopezopeMatch2.7.7
OR
zopezopeMatch2.7.8
OR
zopezopeMatch2.7.9
OR
zopezopeMatch2.8.0
OR
zopezopeMatch2.8.1
OR
zopezopeMatch2.8.2
OR
zopezopeMatch2.8.3
OR
zopezopeMatch2.8.4
OR
zopezopeMatch2.8.5
OR
zopezopeMatch2.8.6
OR
zopezopeMatch2.8.7
OR
zopezopeMatch2.8.8
VendorProductVersionCPE
zopezope2.7.0cpe:2.3:a:zope:zope:2.7.0:*:*:*:*:*:*:*
zopezope2.7.1cpe:2.3:a:zope:zope:2.7.1:*:*:*:*:*:*:*
zopezope2.7.2cpe:2.3:a:zope:zope:2.7.2:*:*:*:*:*:*:*
zopezope2.7.3cpe:2.3:a:zope:zope:2.7.3:*:*:*:*:*:*:*
zopezope2.7.4cpe:2.3:a:zope:zope:2.7.4:*:*:*:*:*:*:*
zopezope2.7.5cpe:2.3:a:zope:zope:2.7.5:*:*:*:*:*:*:*
zopezope2.7.6cpe:2.3:a:zope:zope:2.7.6:*:*:*:*:*:*:*
zopezope2.7.7cpe:2.3:a:zope:zope:2.7.7:*:*:*:*:*:*:*
zopezope2.7.8cpe:2.3:a:zope:zope:2.7.8:*:*:*:*:*:*:*
zopezope2.7.9cpe:2.3:a:zope:zope:2.7.9:*:*:*:*:*:*:*
Rows per page:
1-10 of 191

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.009

Percentile

83.2%