89 matches found
CVE-2006-3458: Undefined Security Weakness
Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 Zope2 does not disable the "raw" command when providing untrusted users with restructured text reStructuredText functionality from docutils, which allows local users to read arbitrary files...
trac -- reStructuredText breach of privacy and denial of service vulnerability
The Trac 0.9.6 Release Notes reports: Fixed reStructuredText breach of privacy and denial of service vulnerability found by Felix Wiemann. The discovered vulnerability requires docutils to be installed and enabled. Systems that do not have docutils installed or enabled are not vulnerable. As of...
zope -- information disclosure vulnerability
Zope team reports: Unspecified vulnerability in Zope2 allows local users to obtain sensitive information via unknown attack vectors related to the docutils module and "restructured text"...
FreeBSD : zope -- expose RestructuredText functionality to untrusted users (d2b80c7c-3aae-11da-9484-00123ffe8333)
A Zope Hotfix Alert reports : This hotfix resolves a security issue with docutils. Affected are possibly all Zope instances that expose RestructuredText functionalies to untrusted users through the web. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...
CVE-2005-3323
docutils in Zope 2.6, 2.7 before 2.7.8, and 2.8 before 2.8.2 allows remote attackers to include arbitrary files via include directives in RestructuredText functionality...
CVE-2005-3323
CVE-2005-3323 affects docutils in Zope: Zope 2.6, Zope 2.7 before 2.7.8, and Zope 2.8 before 2.8.2 are vulnerable. The flaw allows remote attackers to include arbitrary files via include directives in RestructuredText functionality. Root cause: insecure handling of include directives in docutils ...
CVE-2005-3323
docutils in Zope 2.6, 2.7 before 2.7.8, and 2.8 before 2.8.2 allows remote attackers to include arbitrary files via include directives in RestructuredText functionality...
CVE-2005-3323: Undefined Security Weakness
docutils in Zope 2.6, 2.7 before 2.7.8, and 2.8 before 2.8.2 allows remote attackers to include arbitrary files via include directives in RestructuredText functionality...
[SA17173] Zope Unspecified docutils Security Issue
TITLE: Zope Unspecified docutils Security Issue SECUNIA ADVISORY ID: SA17173 VERIFY ADVISORY: http://secunia.com/advisories/17173/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: Zope 2.x http://secunia.com/product/397/ DESCRIPTION: A security issue with an unknown impa...