CVE-2009-0669: Zope Object Database (ZODB) Authentication… – CVSS 7.5 · Watchpost

← All vulnerabilities

Zope Object Database (ZODB) Authentication bypass in ZEO storage servers

ÉLEVÉE 7.5CVE-2009-0669 · GHSA-5432-c996-hvhj · PYSEC-2009-9 · Published 07/08/2009 · updated 16/06/2026

En bref

CVE-2009-0669 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant zodb3, zodb (zope).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 2.9%, plus élevée que 86.8% des vulnérabilités.
Correctif : mettre à jour vers 3.8.2 ou plus récent.

Package	Affected versions	Patched versions
zodb3 PyPI	`< 3.8.2`	`3.8.2`
zodb zope	`= 3.8= 3.8.0≤ 3.8.1`	No fix yet

Description

Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol.

NVD description

Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol.

References

nvd.nist.gov/vuln/detail/CVE-2009-0669 · ADVISORY
exchange.xforce.ibmcloud.com/vulnerabilities/52379 · WEB
pypa/advisory-database · WEB
zopefoundation/ZODB3 · PACKAGE
mail.zope.org/pipermail/zope-announce/2009-August/002220.html · WEB
pypi.python.org/pypi/ZODB3/3.8.2 · WEB
osvdb.org/56826
secunia.com/advisories/36204 · Vendor Advisory
secunia.com/advisories/36205 · Vendor Advisory
securityfocus.com/bid/35987
vupen.com/english/advisories/2009/2217
GitHub Advisory GHSA-5432-c996-hvhj · ADVISORY

Autres vulnérabilités de zodb3

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free