Description (CNA)
Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.zope.org/Products/Zope/Hotfix_2000-12-08/security_alert
- http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-083.php3
- http://www.iss.net/security_center/static/5824.php
- http://www.redhat.com/support/errata/RHSA-2000-125.html
- http://www.osvdb.org/6282
ADP enrichment
No English description supplied.