CVE-2000-1211

תיאור (מקור, אנגלית)

Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.

מדדים

EPSS — סבירות ניצול

1% (אחוזון 73) נכון ל-1 בנובמבר 2026

מוצרים מושפעים

zope: zope

קישורים

• http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-083.php3 PatchVendor Advisory
• http://www.zope.org/Products/Zope/Hotfix_2000-12-08/security_alert PatchVendor Advisory
• http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-083.php3 PatchVendor Advisory
• http://www.zope.org/Products/Zope/Hotfix_2000-12-08/security_alert PatchVendor Advisory
• http://www.iss.net/security_center/static/5824.php
• http://www.osvdb.org/6282
• http://www.redhat.com/support/errata/RHSA-2000-125.html
• http://www.iss.net/security_center/static/5824.php
• http://www.osvdb.org/6282
• http://www.redhat.com/support/errata/RHSA-2000-125.html