CVE-2005-3323

EPSS 2.3%
Veröffentlicht 27.10.2005 10:02:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

docutils in Zope 2.6, 2.7 before 2.7.8, and 2.8 before 2.8.2 allows remote attackers to include arbitrary files via include directives in RestructuredText functionality.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 12

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Zope ≫ Zope Version >= 2.7.0 < 2.7.8

Zope ≫ Zope Version >= 2.8.0 < 2.8.2

Zope ≫ Zope Version2.6

Debian ≫ Debian Linux Version3.0

Debian ≫ Debian Linux Version3.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.3%	0.832

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://www.novell.com/linux/security/advisories/2005_27_sr.html

Third Party Advisory

http://secunia.com/advisories/17173

Third Party Advisory

http://secunia.com/advisories/17309

Third Party Advisory

http://secunia.com/advisories/17676

Third Party Advisory

http://www.debian.org/security/2005/dsa-910

Third Party Advisory

http://www.gentoo.org/security/en/glsa/glsa-200510-20.xml

Third Party Advisory

http://www.securityfocus.com/bid/15082

Third Party Advisory

VDB Entry

http://www.zope.org/Products/Zope/Hotfix_2005-10-09/security_alert

Patch

Vendor Advisory

https://usn.ubuntu.com/229-1/

https://nvd.nist.gov/vuln/detail/CVE-2005-3323

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-3323

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-3323

EUVD