PT-2005-4133 · Zope · Zope

Publicado 2005-10-27 · Atualizado 2018-10-03 · CVE-2005-3323

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Zope versions 2.6, 2.7 through 2.7.7, 2.8 through 2.8.1

Description The issue allows remote attackers to include arbitrary files via include directives in RestructuredText functionality. This could potentially lead to unauthorized access to sensitive information.

Recommendations For Zope version 2.6, update to a newer version to mitigate the risk. For Zope versions 2.7 through 2.7.7, update to version 2.7.8 or later. For Zope versions 2.8 through 2.8.1, update to version 2.8.2 or later.

Correção

Identificadores relacionados

CVE-2005-3323

DSA-910-1

Produtos afetados

Zope

Referências · 11

• http://novell.com/linux/security/advisories/2005_27_sr.html · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3323 · Nota
• http://secunia.com/advisories/17676 · Nota
• http://gentoo.org/security/en/glsa/glsa-200510-20.xml · Aviso do Fabricante
• http://securityfocus.com/bid/15082 · Nota
• http://debian.org/security/2005/dsa-910 · Aviso do Fabricante
• http://secunia.com/advisories/17173 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3323 · Nota de Segurança
• http://zope.org/Products/Zope/Hotfix_2005-10-09/security_alert · Aviso do Fabricante
• https://usn.ubuntu.com/229-1 · Aviso do Fabricante
• http://secunia.com/advisories/17309 · Nota