1. CVE-Search
  2. CVE-2006-3458
ID CVE-2006-3458
Summary Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 (Zope2) does not disable the "raw" command when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows local users to read arbitrary files.
References
Vulnerable Configurations
  • cpe:2.3:a:zope:zope:2.7.0:*:*:*:*:*:*:*
    cpe:2.3:a:zope:zope:2.7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:zope:zope:2.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:zope:zope:2.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:zope:zope:2.7.2:*:*:*:*:*:*:*
    cpe:2.3:a:zope:zope:2.7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:zope:zope:2.7.3:*:*:*:*:*:*:*
    cpe:2.3:a:zope:zope:2.7.3:*:*:*:*:*:*:*
  • cpe:2.3:a:zope:zope:2.7.4:*:*:*:*:*:*:*
    cpe:2.3:a:zope:zope:2.7.4:*:*:*:*:*:*:*
  • cpe:2.3:a:zope:zope:2.7.5:*:*:*:*:*:*:*
    cpe:2.3:a:zope:zope:2.7.5:*:*:*:*:*:*:*
  • cpe:2.3:a:zope:zope:2.7.6:*:*:*:*:*:*:*
    cpe:2.3:a:zope:zope:2.7.6:*:*:*:*:*:*:*
  • cpe:2.3:a:zope:zope:2.7.7:*:*:*:*:*:*:*
    cpe:2.3:a:zope:zope:2.7.7:*:*:*:*:*:*:*
  • cpe:2.3:a:zope:zope:2.7.8:*:*:*:*:*:*:*
    cpe:2.3:a:zope:zope:2.7.8:*:*:*:*:*:*:*
  • cpe:2.3:a:zope:zope:2.8.0:*:*:*:*:*:*:*
    cpe:2.3:a:zope:zope:2.8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:zope:zope:2.8.1:*:*:*:*:*:*:*
    cpe:2.3:a:zope:zope:2.8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:zope:zope:2.8.2:*:*:*:*:*:*:*
    cpe:2.3:a:zope:zope:2.8.2:*:*:*:*:*:*:*
  • cpe:2.3:a:zope:zope:2.8.3:*:*:*:*:*:*:*
    cpe:2.3:a:zope:zope:2.8.3:*:*:*:*:*:*:*
  • cpe:2.3:a:zope:zope:2.8.4:*:*:*:*:*:*:*
    cpe:2.3:a:zope:zope:2.8.4:*:*:*:*:*:*:*
  • cpe:2.3:a:zope:zope:2.8.5:*:*:*:*:*:*:*
    cpe:2.3:a:zope:zope:2.8.5:*:*:*:*:*:*:*
  • cpe:2.3:a:zope:zope:2.8.6:*:*:*:*:*:*:*
    cpe:2.3:a:zope:zope:2.8.6:*:*:*:*:*:*:*
  • cpe:2.3:a:zope:zope:2.8.7:*:*:*:*:*:*:*
    cpe:2.3:a:zope:zope:2.8.7:*:*:*:*:*:*:*
  • cpe:2.3:a:zope:zope:2.9.0:*:*:*:*:*:*:*
    cpe:2.3:a:zope:zope:2.9.0:*:*:*:*:*:*:*
  • cpe:2.3:a:zope:zope:2.9.1:*:*:*:*:*:*:*
    cpe:2.3:a:zope:zope:2.9.1:*:*:*:*:*:*:*
  • cpe:2.3:a:zope:zope:2.9.2:*:*:*:*:*:*:*
    cpe:2.3:a:zope:zope:2.9.2:*:*:*:*:*:*:*
  • cpe:2.3:a:zope:zope:2.9.3:*:*:*:*:*:*:*
    cpe:2.3:a:zope:zope:2.9.3:*:*:*:*:*:*:*
CVSS
Base: 2.1 (as of 03-10-2018 - 21:43)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:N/A:N
refmap via4
bid 18856
confirm http://www.zope.org/Products/Zope/Hotfix-2006-07-05/Hotfix-20060705/README.txt
debian DSA-1113
mlist [Zope-announce] 20060706 Serious security problem with Zope 2
secunia
  • 20988
  • 21025
  • 21130
  • 21459
suse SUSE-SR:2006:019
ubuntu USN-317-1
vupen ADV-2006-2681
xf zope-docutils-information-disclosure(27636)
Last major update 03-10-2018 - 21:43
Published 07-07-2006 - 23:05
Last modified 03-10-2018 - 21:43
Back to Top