Lucene search
GoogleOSV:PYSEC-2006-2HistoryJul 21, 2006 - 2:03 p.m.
PYSEC-2006-2
2006-07-2114:03:00
Google
osv.dev
7
0.037 Low
EPSS
Percentile
91.8%
Trac before 0.9.6 does not disable the “raw” or “include” commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers to read arbitrary files, perform cross-site scripting (XSS) attacks, or cause a denial of service via unspecified vectors. NOTE: this might be related to CVE-2006-3458.
References
secunia.com/advisories/20958
secunia.com/advisories/21534
securitytracker.com/id?1016457
trac.edgewall.org/wiki/ChangeLog
www.debian.org/security/2006/dsa-1152
www.securityfocus.com/bid/18323
www.vupen.com/english/advisories/2006/2729
exchange.xforce.ibmcloud.com/vulnerabilities/27706
exchange.xforce.ibmcloud.com/vulnerabilities/27708
Related
cvelist
cvelist
ubuntucve
ubuntucve
debiancve
debiancve
CVE-2006-3695
2006-07-21 14:03:00
github
github
Trac reStructuredText breach of privacy and denial of service vulnerability
2022-05-01 07:11:38
cve
cve
nvd
nvd
openvas
openvas
FreeBSD Ports: zope
2008-09-04 00:00:00
Debian Security Advisory DSA 1113-1 (zope2.7)
2008-01-17 00:00:00
Ubuntu: Security Advisory (USN-317-1)
2022-08-26 00:00:00
osv
osv
zope2.7 - programming error
2006-07-18 00:00:00
nessus
nessus
Debian DSA-1113-1 : zope2.7 - programming error
2006-10-14 00:00:00
Ubuntu 5.10 : zope2.8 vulnerability (USN-317-1)
2007-11-10 00:00:00
freebsd
freebsd
zope -- information disclosure vulnerability
2006-07-05 00:00:00
debian
debian
[SECURITY] [DSA 1113-1] New zope2.7 packages fix information disclosure
2006-07-18 21:22:08
[SECURITY] [DSA 1152-1] New trac packages fix information disclosure
2006-08-18 09:19:29
ubuntu
ubuntu
zope2.8 vulnerability
2006-07-13 00:00:00