Skip to content
OpenAdvisories
Unscored DSA-1113 1 CVE

zope2.7 - programming error

Published Jul 18, 2006 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 zope2.7 2.7.5-2sarge2

Vulnerabilities 1

  • Low —
    CVE-2006-3458

    Zope allows local users to read arbitrary files

    Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 (Zope2) does not disable the "raw" command when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows local users to read arbitrary files.

    zope2 PyPI