CVE:CVE-2005-2007
CNNVD:CNNVD-200506-183
Edgewall Trac 0.8.3及早期版本中存在目录遍历漏洞，远程攻击者可借助提交到(1) upload脚本或 (2) attachment脚本中的id参数中的".."(参数中包含'..')，来读或写任意文件。
solution:Upgrade edgewall_software trac to a higher version than 0.5,0.5.1,0.5.2,0.6,0.6.1,0.7,0.7.1,0.8,0.8.1,0.8.2,0.8.3,and avoid the version 0.5,0.5.1,0.5.2,0.6,0.6.1,0.7,0.7.1,0.8,0.8.1,0.8.2,0.8.3