CVE-2000-1211 | BDVDB-2026-5016 Detail

Description#

Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.zope.org/Products/Zope/Hotfix_2000-12-08/security_alert
http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-083.php3
http://www.iss.net/security_center/static/5824.php
http://www.redhat.com/support/errata/RHSA-2000-125.html
http://www.osvdb.org/6282

Exploit#

No public exploit known

History#

Version 12003-04-02Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.