CVE

Id
19562  
CVE No.
CVE-2006-3458  
Status
Candidate  
Description
Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 (Zope2) does not disable the "raw" command when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows local users to read arbitrary files.  
Phase
Assigned (20060707)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
176069 19562 CVE-2006-3458 MLIST:[Zope-announce] 20060706 Serious security problem with Zope 2  View
176070 19562 CVE-2006-3458 URL:http://mail.zope.org/pipermail/zope-announce/2006-July/001984.html  View
176071 19562 CVE-2006-3458 CONFIRM:http://www.zope.org/Products/Zope/Hotfix-2006-07-05/Hotfix-20060705/README.txt  View
176072 19562 CVE-2006-3458 DEBIAN:DSA-1113  View
176073 19562 CVE-2006-3458 URL:http://www.debian.org/security/2006/dsa-1113  View
176074 19562 CVE-2006-3458 SUSE:SUSE-SR:2006:019  View
176075 19562 CVE-2006-3458 URL:http://www.novell.com/linux/security/advisories/2006_19_sr.html  View
176076 19562 CVE-2006-3458 UBUNTU:USN-317-1  View
176077 19562 CVE-2006-3458 URL:http://www.ubuntulinux.org/support/documentation/usn/usn-317-1  View
176078 19562 CVE-2006-3458 BID:18856  View
176079 19562 CVE-2006-3458 URL:http://www.securityfocus.com/bid/18856  View
176080 19562 CVE-2006-3458 VUPEN:ADV-2006-2681  View
176081 19562 CVE-2006-3458 URL:http://www.vupen.com/english/advisories/2006/2681  View
176082 19562 CVE-2006-3458 SECUNIA:20988  View
176083 19562 CVE-2006-3458 URL:http://secunia.com/advisories/20988  View
176084 19562 CVE-2006-3458 SECUNIA:21025  View
176085 19562 CVE-2006-3458 URL:http://secunia.com/advisories/21025  View
176086 19562 CVE-2006-3458 SECUNIA:21130  View
176087 19562 CVE-2006-3458 URL:http://secunia.com/advisories/21130  View
176088 19562 CVE-2006-3458 SECUNIA:21459  View
176089 19562 CVE-2006-3458 URL:http://secunia.com/advisories/21459  View
176090 19562 CVE-2006-3458 XF:zope-docutils-information-disclosure(27636)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58269 JVNDB-2006-000465 LibTIFF の TIFFScanLineSize() 関数および TIFFReadScanline() 関数におけるヒープオーバーフローの脆弱性 LibTIFF には、JPEG デコーダである tiff_jpeg.c の TIFFScanLineSize() および TIFFReadScanline() 関数において、デコード処理を行う際に不備が存在するため、ヒープオーバーフローの脆弱性が存在します。 CVE-2006-3460 19562 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000465.html  View