Description
The docutils module in Zope (Zope2) 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with reStructuredText (reST) markup, which allows remote attackers to read arbitrary files via a csv_table directive, a different vulnerability than CVE-2006-3458.
References (7)
Core 7
Core References
Various Sources mailing-list
x_refsource_mlist
http://mail.zope.org/pipermail/zope-announce/2006-August/002005.html
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2006/3653
Patch, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/21953
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/20022
Patch x_refsource_confirm
http://www.zope.org/Products/Zope/Hotfix-2006-08-21/Hotfix-20060821/README.txt
Patch, Vendor Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2006/dsa-1176
Patch, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/21947
Scores
EPSS
0.0238
EPSS Percentile
82.1%
Details
Status
published
Products (20)
pypi/zope2
2.7.0PyPI
zope/zope
2.7.0
zope/zope
2.7.1
zope/zope
2.7.2
zope/zope
2.7.3
zope/zope
2.7.4
zope/zope
2.7.5
zope/zope
2.7.6
zope/zope
2.7.7
zope/zope
2.7.8
... and 10 more
Published
Sep 19, 2006
Tracked Since
Feb 18, 2026