CVE-2006-3695
Trac reStructuredText breach of privacy and denial of service vulnerability
Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers to read arbitrary files, perform cross-site scripting (XSS) attacks, or cause a denial of service via unspecified vectors. NOTE: this might be related to CVE-2006-3458.
Exploit likelihood
What each source reports
NVD Score used
Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers to read arbitrary files, perform cross-site scripting (XSS) attacks, or cause a denial of service via unspecified vectors. NOTE: this might be related to CVE-2006-3458.
- Record
CVE-2006-3695- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers to read arbitrary files, perform cross-site scripting (XSS) attacks, or cause a denial of service via unspecified vectors. NOTE: this might be related to CVE-2006-3458.
- Record
CVE-2006-3695- Updated
- 2026-11-02
EUVDEUVD-2006-0004 No score
Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers to read arbitrary files, perform cross-site scripting (XSS) attacks, or cause a denial of service via unspecified vectors. NOTE: this might be related to CVE-2006-3458.
- Record
EUVD-2006-0004- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r524-c2gf-5chr
Trac reStructuredText breach of privacy and denial of service vulnerability
Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers to read arbitrary files, perform cross-site scripting (XSS) attacks, or cause a denial of service via unspecified vectors. NOTE: this might be related to CVE-2006-3458.
- Record
GHSA-r524-c2gf-5chr- CVSS 4.0
- 8.8 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:L/SA:N - CVSS 3.1
- 9.4 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H - Weakness
- CWE-200, CWE-400
- Updated
- 2026-11-02
OSVGHSA-r524-c2gf-5chr
Trac reStructuredText breach of privacy and denial of service vulnerability
Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers to read arbitrary files, perform cross-site scripting (XSS) attacks, or cause a denial of service via unspecified vectors. NOTE: this might be related to CVE-2006-3458.
- Record
GHSA-r524-c2gf-5chr- CVSS 4.0
- 8.8 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:L/SA:N - CVSS 3.1
- 9.4 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H - Weakness
- CWE-200, CWE-400
- Updated
- 2026-11-02
OSV No score
Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers to read arbitrary files, perform cross-site scripting (XSS) attacks, or cause a denial of service via unspecified vectors. NOTE: this might be related to CVE-2006-3458.
- Record
CVE-2006-3695- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-3695 No score
Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers to read arbitrary files, perform cross-site scripting (XSS) attacks, or cause a denial of service via unspecified vectors. NOTE: this might be related to CVE-2006-3458.
- Record
DEBIAN-CVE-2006-3695- Updated
- 2026-11-02
OSVPYSEC-2006-2 No score
Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers to read arbitrary files, perform cross-site scripting (XSS) attacks, or cause a denial of service via unspecified vectors. NOTE: this might be related to CVE-2006-3458.
- Record
PYSEC-2006-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
tracPyPI |
before 0.9.6 | 0.9.6 |
tracDebian:13 |
before 0.9.6-1 | 0.9.6-1 |
tracDebian:14 |
before 0.9.6-1 | 0.9.6-1 |
tracDebian:3.1 |
before 0.8.1-3sarge5, plus listed versions 0.8.1-30.8.1-3sarge10.8.1-3sarge20.8.1-3sarge30.8.1-3sarge4 |
0.8.1-3sarge5 |
tracPyPI |
before 0.9.6, plus listed versions 0.8.40.9 |
0.9.6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-3695 is a medium vulnerability (CVSS 6.8) in Edgewall Software Trac, published July 19, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.90%, the 79th percentile. Fixed in trac 0.9.6.
References
exchange.xforce.ibmcloud.com/vulnerabilities/27706
vupen.com/english/advisories/2006/2729
secunia.com/advisories/20958
securitytracker.com/id?1016457
securityfocus.com/bid/18323
Show 11 moreShow less
debian.org/security/2006/dsa-1152
trac.edgewall.org/wiki/ChangeLog
nvd.nist.gov/vuln/detail/CVE-2006-3695
web.archive.org/web/20061227230548/http://trac.edgewall.org/wiki/ChangeLog
github.com/pypa/advisory-database/tree/main/vulns/trac/PYSEC-2006-2.yaml
security-tracker.debian.org/tracker/CVE-2006-3695