CVE-2006-3695 Trac reStructuredText breach of privacy and denial of service vulnerability

What is CVE-2006-3695?

CVE-2006-3695 is a medium-severity vulnerability in n/a, published on 19 Jul 2006. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers to read arbitrary files, perform cross-site scripting (XSS) attacks, or cause a denial of service via unspecified vectors. NOTE: this might be related to CVE-2006-3458.

Which versions are affected by CVE-2006-3695?

3 open source packages ship an affected version, including trac. It affects 1 product.

Products include Edgewall Software Trac.

How do I fix CVE-2006-3695?

Upgrade trac to 0.9.6 or later.

Is CVE-2006-3695 being exploited?

There is no known exploitation of CVE-2006-3695 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2007-1406 Trac missing Content-Disposition HTTP header Critical 10.0
• CVE-2006-5878 Edgewall Trac Cross-site request forgery (CSRF) vulnerability High 7.5
• CVE-2005-4065 SQL injection in n/a High 7.5
• CVE-2005-3980 SQL injection in n/a High 7.5
• CVE-2005-2147 Path traversal in n/a Medium 6.4

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2006-3695, DSA-1152, GHSA-r524-c2gf-5chr, PYSEC-2006-2.