CVE-2005-2147

Publication date 6 July 2005

Last updated 24 July 2024


Ubuntu priority

Trac before 0.8.4 allows remote attackers to read or upload arbitrary files via a full pathname in the id parameter to the (1) upload or (2) attachment viewer scripts.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
trac 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Not affected