CVE-2005-2147

Publication date 6 July 2005

Last updated 17 July 2025


Ubuntu priority

Description

Trac before 0.8.4 allows remote attackers to read or upload arbitrary files via a full pathname in the id parameter to the (1) upload or (2) attachment viewer scripts.

Status

Package Ubuntu Release Status
trac 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Not affected


Access our resources on patching vulnerabilities