CVE-2005-3323

Опубликовано: 27 окт. 2005

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

docutils in Zope 2.6, 2.7 before 2.7.8, and 2.8 before 2.8.2 allows remote attackers to include arbitrary files via include directives in RestructuredText functionality.

Ссылки

http://secunia.com/advisories/17173
Third Party Advisory
http://secunia.com/advisories/17309
Third Party Advisory
http://secunia.com/advisories/17676
Third Party Advisory
http://www.debian.org/security/2005/dsa-910
Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200510-20.xml
Third Party Advisory
http://www.novell.com/linux/security/advisories/2005_27_sr.html
Third Party Advisory
http://www.securityfocus.com/bid/15082
Third Party Advisory
VDB Entry
http://www.zope.org/Products/Zope/Hotfix_2005-10-09/security_alert
Patch
Vendor Advisory
https://usn.ubuntu.com/229-1/
http://secunia.com/advisories/17173
Third Party Advisory
http://secunia.com/advisories/17309
Third Party Advisory
http://secunia.com/advisories/17676
Third Party Advisory
http://www.debian.org/security/2005/dsa-910
Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200510-20.xml
Third Party Advisory
http://www.novell.com/linux/security/advisories/2005_27_sr.html
Third Party Advisory
http://www.securityfocus.com/bid/15082
Third Party Advisory
VDB Entry
http://www.zope.org/Products/Zope/Hotfix_2005-10-09/security_alert
Patch
Vendor Advisory
https://usn.ubuntu.com/229-1/

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:zope:zope:*:*:*:*:*:*:*:*

Версия от 2.7.0 (включая) до 2.7.8 (исключая)

cpe:2.3:a:zope:zope:*:*:*:*:*:*:*:*

Версия от 2.8.0 (включая) до 2.8.2 (исключая)

cpe:2.3:a:zope:zope:2.6:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.02297

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-3323

ubuntu

почти 20 лет назад

docutils in Zope 2.6, 2.7 before 2.7.8, and 2.8 before 2.8.2 allows remote attackers to include arbitrary files via include directives in RestructuredText functionality.

CVE-2005-3323

debian

почти 20 лет назад

docutils in Zope 2.6, 2.7 before 2.7.8, and 2.8 before 2.8.2 allows re ...

GHSA-r5w9-hv7v-5mpj

github

больше 3 лет назад

docutils in Zope 2.6, 2.7 before 2.7.8, and 2.8 before 2.8.2 allows remote attackers to include arbitrary files via include directives in RestructuredText functionality.

EPSS

Процентиль: 84%

0.02297

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other