Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

trac: missing input sanitizing

Package(s):

trac

CVE #(s):

CVE-2006-3695

Created:

August 18, 2006

Updated:

August 23, 2006

Description:

Felix Wiemann discovered that trac, an enhanced Wiki and issue tracking system for software development projects, can be used to disclose arbitrary local files. To fix this problem, python-docutils needs to be updated as well.

Alerts:

Debian

DSA-1152-1

2006-08-18

(Log in to post comments)