Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2006-3695

Date: July 18, 2006

Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers to read arbitrary files, perform cross-site scripting (XSS) attacks, or cause a denial of service via unspecified vectors. NOTE: this might be related to CVE-2006-3458.

Severity Score

Related Resources (12)

http://trac.edgewall.org/wiki/ChangeLog
http://secunia.com/advisories/21534
https://people.canonical.com/~ubuntu-security/cve/CVE-2006-3695
https://exchange.xforce.ibmcloud.com/vulnerabilities/27708
http://www.vupen.com/english/advisories/2006/2729
http://www.securityfocus.com/bid/18323
http://secunia.com/advisories/20958
https://exchange.xforce.ibmcloud.com/vulnerabilities/27706
http://www.debian.org/security/2006/dsa-1152
https://nvd.nist.gov/vuln/detail/CVE-2006-3695
http://securitytracker.com/id?1016457
https://www.mend.io/vulnerability-database/CVE-2006-3695

Severity Score

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): HIGH
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): LOW
Availability (A): LOW

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): MEDIUM
Authentication (AU): NONE
Confidentiality (C): PARTIAL
Integrity (I): PARTIAL
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us