Debian/trac: unknown

Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors.

Action: Upgrade trac to 0.10.4-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-1406#Debian:14/trac
• https://security-tracker.debian.org/tracker/CVE-2007-1406

published 2007-03-10T22:19:00Z · modified 2026-10-21T17:47:40.354510399Z · JSON