Published: 23/07/2002 Updated: 05/09/2008

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

ZCatalog plug-in index support capability for Zope 2.4.0 up to and including 2.5.1 allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of catalog indexes.

Vulnerable Product	Search on Vulmon	Subscribe to Product
zope zope 2.5.1
zope zope 2.4.0

A vulnerability has been discovered in the index support of the ZCatalog plug-in in Zope, an open source web application server A flaw in the security settings of ZCatalog allows anonymous users to call arbitrary methods of catalog indexes The vulnerability also allows untrusted code to do the same For the stable distribution (woody) this proble ...

NVD-CWE-Other http://www.zope.org/Products/Zope/Hotfix_2002-06-14/security_alert http://www.debian.org/security/2004/dsa-490 http://www.redhat.com/support/errata/RHSA-2002-060.html http://www.securityfocus.com/bid/5812 http://www.iss.net/security_center/static/9610.php https://nvd.nist.gov https://www.debian.org/security/./dsa-490

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2002-0688

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect