FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2005-3323

This CVE name corresponds to:

Entered	Topic
2005-10-11	zope -- expose RestructuredText functionality to untrusted users

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2005-3323 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2005-3323
Phase	Assigned(20051027)

Description

docutils in Zope 2.6, 2.7 before 2.7.8, and 2.8 before 2.8.2 allows remote attackers to include arbitrary files via include directives in RestructuredText functionality.

References

Source	Reference
CONFIRM	http://www.zope.org/Products/Zope/Hotfix_2005-10-09/security_alert
DEBIAN	DSA-910
GENTOO	GLSA-200510-20
SUSE	SUSE-SR:2005:027
UBUNTU	USN-229-1
BID	15082
SECUNIA	17173
SECUNIA	17309
SECUNIA	17676