CVE-2009-0669

Summary

Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.vupen.com/english/advisories/2009/2217
• http://secunia.com/advisories/36204
• http://osvdb.org/56826
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52379
• http://pypi.python.org/pypi/ZODB3/3.8.2#whats-new-in-zodb-3-8-2
• http://secunia.com/advisories/36205
• http://mail.zope.org/pipermail/zope-announce/2009-August/002220.html
• http://www.securityfocus.com/bid/35987

References

• http://www.vupen.com/english/advisories/2009/2217
• http://secunia.com/advisories/36204
• http://osvdb.org/56826
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52379
• http://pypi.python.org/pypi/ZODB3/3.8.2#whats-new-in-zodb-3-8-2
• http://secunia.com/advisories/36205
• http://mail.zope.org/pipermail/zope-announce/2009-August/002220.html
• http://www.securityfocus.com/bid/35987

• ←Previous
• Next→