Описание
Zope does not properly perform security registration for legacy names
Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2000-1211
- https://web.archive.org/web/20010910131909/http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-083.php3
- https://web.archive.org/web/20021227061438/http://www.iss.net/security_center/static/5824.php
- http://www.redhat.com/support/errata/RHSA-2000-125.html
- http://www.zope.org/Products/Zope/Hotfix_2000-12-08/security_alert
Пакеты
Наименование
zope
pip
Затронутые версииВерсия исправления
>= 2.2.0, <= 2.2.4
Отсутствует
Связанные уязвимости
redhat
около 25 лет назад
Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.
nvd
около 25 лет назад
Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.