Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:PYSEC-2006-2
HistoryJul 21, 2006 - 2:03 p.m.

PYSEC-2006-2

2006-07-2114:03:00
Google
osv.dev
7

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

JSON

Trac before 0.9.6 does not disable the “raw” or “include” commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers to read arbitrary files, perform cross-site scripting (XSS) attacks, or cause a denial of service via unspecified vectors. NOTE: this might be related to CVE-2006-3458.

CPENameOperatorVersion
traceq0.9
traceq0.8.4

Related

debiancve 1
ubuntucve 3
cve 3
github 1
nessus 4
osv 1
openvas 7
freebsd 1
debian 2
ubuntu 1
debiancve
debiancve
CVE-2006-3695
2006-07-21 14:03:00
ubuntucve
ubuntucve
CVE-2006-3695
2006-07-21 00:00:00
CVE-2006-3458
2006-07-07 00:00:00
CVE-2006-4684
2006-09-19 00:00:00
cve
cve
CVE-2006-3695
2006-07-21 14:03:00
CVE-2006-3458
2006-07-07 23:05:00
CVE-2006-4684
2006-09-19 18:07:00
github
github
Trac reStructuredText breach of privacy and denial of service vulnerability
2022-05-01 07:11:38
nessus
nessus
Debian DSA-1113-1 : zope2.7 - programming error
2006-10-14 00:00:00
Ubuntu 5.10 : zope2.8 vulnerability (USN-317-1)
2007-11-10 00:00:00
FreeBSD : zope -- information disclosure vulnerability (5f2a0c40-1322-11db-bd23-000475abc56f)
2006-07-17 00:00:00
osv
osv
zope2.7 - programming error
2006-07-18 00:00:00
openvas
openvas
FreeBSD Ports: zope
2008-09-04 00:00:00
Debian: Security Advisory (DSA-1113)
2008-01-17 00:00:00
Debian Security Advisory DSA 1113-1 (zope2.7)
2008-01-17 00:00:00
freebsd
freebsd
zope -- information disclosure vulnerability
2006-07-05 00:00:00
debian
debian
[SECURITY] [DSA 1113-1] New zope2.7 packages fix information disclosure
2006-07-18 21:22:08
[SECURITY] [DSA 1152-1] New trac packages fix information disclosure
2006-08-18 09:19:29
ubuntu
ubuntu
zope2.8 vulnerability
2006-07-13 00:00:00

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

JSON
Related for OSV:PYSEC-2006-2
debiancve1ubuntucve3cve3github1nessus4osv1openvas7freebsd1debian2ubuntu1