PT-2000-1991 · Zope · Zope

Published 2000-12-16 · Updated 2022-04-30 · CVE-2000-1211

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Zope versions 2.2.0 through 2.2.4

Description The issue concerns improper security registration for legacy names of object constructors, such as DTML method objects. This could allow attackers to perform unauthorized activities.

Recommendations For versions 2.2.0 through 2.2.4, update to a version that properly performs security registration for legacy object constructor names to prevent unauthorized activities.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2000-1211

GHSA-H2XH-JVPF-XQ42

Affected Products

Zope

References · 10

• http://zope.org/Products/Zope/Hotfix_2000-12-08/security_alert · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-h2xh-jvpf-xq42 · Vendor Advisory
• http://linux-mandrake.com/en/security/2000/MDKSA-2000-083.php3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-1211 · Security Note
• http://redhat.com/support/errata/RHSA-2000-125.html · Note
• https://web.archive.org/web/20010910131909/http://linux-mandrake.com/en/security/2000/MDKSA-2000-083.php3 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-1211 · Note
• http://osvdb.org/6282 · Note
• https://web.archive.org/web/20021227061438/http://iss.net/security_center/static/5824.php · Note
• http://iss.net/security_center/static/5824.php · Note