CVE-2000-1211

CVE-2000-1211

High · published December 16, 2000

CVSS v2.0
7.5
EPSS
1%
Percentile
72.8
In the wild
Unconfirmed
What it is

Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.

The record
Technical detail
CVSS v2.0
7.5 · HIGH
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS v4.0
Not supplied
EPSS
0.01439 · 72.8th percentile
Published
2000-12-16T10:00Z
Affected products (11)
ProductVersionsFixed in
zope/zopeall versions—
zope/zopeall versions—
zope/zopeall versions—
zope/zopeall versions—
zope/zopeall versions—
zope/zopeall versions—
zope/zopeall versions—
zope/zopeall versions—
zope/zopeall versions—
zope/zopeall versions—
zope/zopeall versions—
References (10)
http://www.iss.net/security_center/static/5824.php · [email protected]http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-083.php3 · [email protected]http://www.osvdb.org/6282 · [email protected]http://www.redhat.com/support/errata/RHSA-2000-125.html · [email protected]http://www.zope.org/Products/Zope/Hotfix_2000-12-08/security_alert · [email protected]http://www.iss.net/security_center/static/5824.php · af854a3a-2127-422b-91ae-364da2661108http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-083.php3 · af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/6282 · af854a3a-2127-422b-91ae-364da2661108http://www.redhat.com/support/errata/RHSA-2000-125.html · af854a3a-2127-422b-91ae-364da2661108http://www.zope.org/Products/Zope/Hotfix_2000-12-08/security_alert · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 02 APR 05:00Z
    Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow…
    cvelistv5