CVE-2005-3323

N/A
Published: October 27, 2005 at 04:00 AM UTC
Updated: June 16, 2026 at 10:16 PM UTC
2 products affected across 2 vendorsDebian LinuxZope

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 3%

Description

docutils in Zope 2.6, 2.7 before 2.7.8, and 2.8 before 2.8.2 allows remote attackers to include arbitrary files via include directives in RestructuredText functionality.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

2.7.0 ≤ v < 2.7.82.8.0 ≤ v < 2.8.22.6
Affected range stops below 2.7.8, so it looks safe — our inference, not a vendor statement
Affected range stops below 2.8.2, so it looks safe — our inference, not a vendor statement

References (9)

Third Party Advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17173
Third Party Advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17309
Third Party Advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17676
Vendor Advisoryx_refsource_DEBIANThird Party Advisory
http://www.debian.org/security/2005/dsa-910
Vendor Advisoryx_refsource_GENTOOThird Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200510-20.xml
Vendor Advisoryx_refsource_SUSEThird Party Advisory
http://www.novell.com/linux/security/advisories/2005_27_sr.html
VDB Entryx_refsource_BIDThird Party Advisory
http://www.securityfocus.com/bid/15082

CVSS

Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-Other

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card