Edgewall Software Trac Search Module SQL Injection Vulnerability

Bugtraq ID:	15720
Class:	Input Validation Error
CVE:	CVE-2005-4065
Remote:	Yes
Local:	No
Published:	Dec 05 2005 12:00AM
Updated:	Feb 07 2006 08:53PM
Credit:	The vendor disclosed this vulnerability.
Vulnerable:	Edgewall Software Trac 0.9.1 Edgewall Software Trac 0.9 Edgewall Software Trac 0.8.4 Edgewall Software Trac 0.8.3 Edgewall Software Trac 0.8.1 - Debian Linux 3.1 sparc - Debian Linux 3.1 s/390 - Debian Linux 3.1 ppc - Debian Linux 3.1 mipsel - Debian Linux 3.1 mips - Debian Linux 3.1 m68k - Debian Linux 3.1 ia-64 - Debian Linux 3.1 ia-32 - Debian Linux 3.1 hppa - Debian Linux 3.1 arm - Debian Linux 3.1 alpha - Debian Linux 3.1 Edgewall Software Trac 0.7.1 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1

Not Vulnerable:	Edgewall Software Trac 0.9.2 Edgewall Software Trac 0.9.1