Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

zope2.7: information disclosure

Package(s):

zope2.7

CVE #(s):

CVE-2006-4684

Created:

September 14, 2006

Updated:

September 20, 2006

Description:

Version 2.7 of Zope has an information disclosure vulnerability. The csv_table directive is not disabled in web pages containing ReST markup. Files that the Zope server has access to can be exposed.

Alerts:

Debian

DSA-1176-1

2006-09-13

(Log in to post comments)