CVE-2000-1211

Опубликовано: 16 дек. 2000

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.

Ссылки

http://www.iss.net/security_center/static/5824.php
http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-083.php3
Patch
Vendor Advisory
http://www.osvdb.org/6282
http://www.redhat.com/support/errata/RHSA-2000-125.html
http://www.zope.org/Products/Zope/Hotfix_2000-12-08/security_alert
Patch
Vendor Advisory
http://www.iss.net/security_center/static/5824.php
http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-083.php3
Patch
Vendor Advisory
http://www.osvdb.org/6282
http://www.redhat.com/support/errata/RHSA-2000-125.html
http://www.zope.org/Products/Zope/Hotfix_2000-12-08/security_alert
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:zope:zope:2.2.0:*:*:*:*:*:*:*

cpe:2.3:a:zope:zope:2.2.0a1:*:*:*:*:*:*:*

cpe:2.3:a:zope:zope:2.2.0b1:*:*:*:*:*:*:*

cpe:2.3:a:zope:zope:2.2.0b2:*:*:*:*:*:*:*

cpe:2.3:a:zope:zope:2.2.0b3:*:*:*:*:*:*:*

cpe:2.3:a:zope:zope:2.2.0b4:*:*:*:*:*:*:*

cpe:2.3:a:zope:zope:2.2.1:*:*:*:*:*:*:*

cpe:2.3:a:zope:zope:2.2.1b1:*:*:*:*:*:*:*

cpe:2.3:a:zope:zope:2.2.2:*:*:*:*:*:*:*

cpe:2.3:a:zope:zope:2.2.3:*:*:*:*:*:*:*

cpe:2.3:a:zope:zope:2.2.4:*:*:*:*:*:*:*

EPSS

Процентиль: 69%

0.00602

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2000-1211

redhat

больше 24 лет назад

GHSA-h2xh-jvpf-xq42

github

около 3 лет назад

Zope does not properly perform security registration for legacy names