CVE-2006-3695
2 advisories.
PyPI/trac CVE-2006-3695: critical 9.4
Trac reStructuredText breach of privacy and denial of service vulnerability
Action: Upgrade trac to 0.9.6 or later.
pip install trac==0.9.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.6 | - |
Fixed versions
| 0.9.6 |
Sources
- osv: GHSA-r524-c2gf-5chr
- https://nvd.nist.gov/vuln/detail/CVE-2006-3695
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27706
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27708
- https://github.com/pypa/advisory-database/tree/main/vulns/trac/PYSEC-2006-2.yaml
- https://web.archive.org/web/20061227230548/http://trac.edgewall.org/wiki/ChangeLog
- https://web.archive.org/web/20140804165436/http://secunia.com/advisories/21534
- https://web.archive.org/web/20140806223337/http://secunia.com/advisories/20958
- https://web.archive.org/web/20200228034827/http://www.securityfocus.com/bid/18323
- http://trac.edgewall.org/wiki/ChangeLog
- http://www.debian.org/security/2006/dsa-1152
CVE-2006-3695 · published · modified · JSON
PyPI/trac CVE-2006-3695: unknown
Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers t
Action: Upgrade trac to 0.9.6 or later.
pip install trac==0.9.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.6 | - |
Fixed versions
| 0.9.6 |
Sources
- osv: PYSEC-2006-2
- http://trac.edgewall.org/wiki/ChangeLog
- http://securitytracker.com/id?1016457
- http://www.debian.org/security/2006/dsa-1152
- http://secunia.com/advisories/20958
- http://secunia.com/advisories/21534
- http://www.securityfocus.com/bid/18323
- http://www.vupen.com/english/advisories/2006/2729
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27708
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27706
- https://github.com/advisories/GHSA-r524-c2gf-5chr
CVE-2006-3695 · published · modified · JSON