|
|
Info |
Last Modified |
| 5 months ago |
|
|
|
|
Description |
Zope contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when use of Legacy object names ( e.g. DTML Methods )occurs. This flaw may lead to a loss of Confidentiality and/or Integrity.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Confidentiality,
Loss of Integrity
Exploit:
Exploit Available
Disclosure:
OSVDB Verified
|
|
Solution |
It is possible to correct the flaw by implementing Zope hotfix 2000-12-08 available from the Vendor site.
|
|
Products |
|
Zope
 |
2.2.0 |
2.2.1 |
2.2.2 |
2.2.3 |
2.2.4 |
|
|
|
|
Credit |
- aleksander salwa - ololo
 zeus.polsl.gliwice.pl -
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
