7.5

CVE-2005-3323

docutils in Zope 2.6, 2.7 before 2.7.8, and 2.8 before 2.8.2 allows remote attackers to include arbitrary files via include directives in RestructuredText functionality.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
ZopeZope Version >= 2.7.0 < 2.7.8
ZopeZope Version >= 2.8.0 < 2.8.2
ZopeZope Version2.6
DebianDebian Linux Version3.0
DebianDebian Linux Version3.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.05% 0.858
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.novell.com/linux/security/advisories/2005_27_sr.html
Third Party Advisory
http://secunia.com/advisories/17173
Third Party Advisory
http://secunia.com/advisories/17309
Third Party Advisory
http://secunia.com/advisories/17676
Third Party Advisory
http://www.debian.org/security/2005/dsa-910
Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200510-20.xml
Third Party Advisory
http://www.securityfocus.com/bid/15082
Third Party Advisory
VDB Entry
http://www.zope.org/Products/Zope/Hotfix_2005-10-09/security_alert
Patch
Vendor Advisory
https://usn.ubuntu.com/229-1/