Trac reStructuredText breach of privacy and denial of service vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2006-3695 · ADVISORY
• exchange.xforce.ibmcloud.com/vulnerabilities/27706 · WEB
• exchange.xforce.ibmcloud.com/vulnerabilities/27708 · WEB
• pypa/advisory-database · WEB
• web.archive.org/web/20061227230548/http://trac.edgewall.org/wiki/ChangeLog · WEB
• web.archive.org/web/20140804165436/http://secunia.com/advisories/21534 · WEB
• web.archive.org/web/20140806223337/http://secunia.com/advisories/20958 · WEB
• web.archive.org/web/20200228034827/http://www.securityfocus.com/bid/18323 · WEB
• trac.edgewall.org/wiki/ChangeLog · WEB
• debian.org/security/2006/dsa-1152 · WEB
• secunia.com/advisories/20958 · Vendor Advisory
• secunia.com/advisories/21534 · Vendor Advisory
• securitytracker.com/id
• securityfocus.com/bid/18323
• vupen.com/english/advisories/2006/2729 · Vendor Advisory
• GitHub Advisory GHSA-r524-c2gf-5chr · ADVISORY

trac のその他の脆弱性

• CVE-2009-4405高 7.5Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to (1) "policy checks in…
• CVE-2008-5647中 5.0Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attackers to conduct phishing attacks via unknown attack…
• CVE-2008-5646高 7.5Unspecified vulnerability in Trac before 0.11.2 allows attackers to cause a denial of service via unknown attack vectors related to "certain…
• CVE-2008-3328中 4.3Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or …
• CVE-2008-2951中 6.1Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and …