PT-2000-1991 · Zope · Zope

Publicado 2000-12-16 · Atualizado 2022-04-30 · CVE-2000-1211

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Zope versions 2.2.0 through 2.2.4

Description The issue concerns improper security registration for legacy names of object constructors, such as DTML method objects. This could allow attackers to perform unauthorized activities.

Recommendations For versions 2.2.0 through 2.2.4, update to a version that properly performs security registration for legacy object constructor names to prevent unauthorized activities.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2000-1211

GHSA-H2XH-JVPF-XQ42

Produtos afetados

Zope

Referências · 10

• http://redhat.com/support/errata/RHSA-2000-125.html · Nota
• http://zope.org/Products/Zope/Hotfix_2000-12-08/security_alert · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-h2xh-jvpf-xq42 · Aviso do Fabricante
• http://linux-mandrake.com/en/security/2000/MDKSA-2000-083.php3 · Aviso do Fabricante
• https://web.archive.org/web/20010910131909/http://linux-mandrake.com/en/security/2000/MDKSA-2000-083.php3 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-1211 · Nota
• http://osvdb.org/6282 · Nota
• https://web.archive.org/web/20021227061438/http://iss.net/security_center/static/5824.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-1211 · Nota de Segurança
• http://iss.net/security_center/static/5824.php · Nota