CVE-2006-3695

Description

Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers to read arbitrary files, perform cross-site scripting (XSS) attacks, or cause a denial of service via unspecified vectors. NOTE: this might be related to CVE-2006-3458.

How to fix CVE-2006-3695

To remediate CVE-2006-3695, upgrade the affected package to a fixed version below.

• —upgrade to 0.9.6-1 or later
• —upgrade to 0.8.1-3sarge5 or later
• —upgrade to 0.9.6 or later
• —upgrade to 0.9.6 or later

Is CVE-2006-3695 being exploited?

Low — EPSS is 3.0%, meaning exploitation activity has not been observed at scale.

Affected packages (4)

• from 0, < 0.9.6-1
• from 0, < 0.8.1-3sarge5
• from 0, < 0.9.6
• from 0, < 0.9.6

CVSS scores

References (17)

• ADVISORYsecunia.com/advisories/20958
• ADVISORYsecunia.com/advisories/21534
• ADVISORYgithub.com/advisories/GHSA-r524-c2gf-5chr
• ADVISORYnvd.nist.gov/vuln/detail/CVE-2006-3695
• ADVISORYsecurity-tracker.debian.org