CVE-2006-3695

2006-07-2100:00:00

ubuntu.com

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.037 Low

EPSS

Percentile

91.7%

JSON

Trac before 0.9.6 does not disable the “raw” or “include” commands when
providing untrusted users with restructured text (reStructuredText)
functionality from docutils, which allows remote attackers to read
arbitrary files, perform cross-site scripting (XSS) attacks, or cause a
denial of service via unspecified vectors. NOTE: this might be related to
CVE-2006-3458.

OSVersionArchitecturePackageVersionFilename
ubuntu6.10noarchtrac< 0.9.6-1UNKNOWN
ubuntu7.04noarchtrac< 0.9.6-1UNKNOWN
ubuntu7.10noarchtrac< 0.9.6-1UNKNOWN
ubuntu8.04noarchtrac< 0.9.6-1UNKNOWN
ubuntu8.10noarchtrac< 0.9.6-1UNKNOWN
ubuntu9.04noarchtrac< 0.9.6-1UNKNOWN
ubuntu9.10noarchtrac< 0.9.6-1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.10	noarch	trac	< 0.9.6-1	UNKNOWN
ubuntu	7.04	noarch	trac	< 0.9.6-1	UNKNOWN
ubuntu	7.10	noarch	trac	< 0.9.6-1	UNKNOWN
ubuntu	8.04	noarch	trac	< 0.9.6-1	UNKNOWN
ubuntu	8.10	noarch	trac	< 0.9.6-1	UNKNOWN
ubuntu	9.04	noarch	trac	< 0.9.6-1	UNKNOWN
ubuntu	9.10	noarch	trac	< 0.9.6-1	UNKNOWN