CVE-2009-0669: Zope Object Database (ZODB) Authentication… – CVSS 7.5 · Watchpost

← All vulnerabilities

Zope Object Database (ZODB) Authentication bypass in ZEO storage servers

ALTO 7.5CVE-2009-0669 · GHSA-5432-c996-hvhj · PYSEC-2009-9 · Published 07/08/2009 · updated 16/06/2026

In breve

CVE-2009-0669 è una vulnerabilità ALTO (CVSS 7.5) che riguarda zodb3, zodb (zope).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.9%, superiore al 86.8% delle vulnerabilità.
Correzione: aggiornare a 3.8.2 o successiva.

Package	Affected versions	Patched versions
zodb3 PyPI	`< 3.8.2`	`3.8.2`
zodb zope	`= 3.8= 3.8.0≤ 3.8.1`	No fix yet

Description

Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol.

NVD description

Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol.

References

nvd.nist.gov/vuln/detail/CVE-2009-0669 · ADVISORY
exchange.xforce.ibmcloud.com/vulnerabilities/52379 · WEB
pypa/advisory-database · WEB
zopefoundation/ZODB3 · PACKAGE
mail.zope.org/pipermail/zope-announce/2009-August/002220.html · WEB
pypi.python.org/pypi/ZODB3/3.8.2 · WEB
osvdb.org/56826
secunia.com/advisories/36204 · Vendor Advisory
secunia.com/advisories/36205 · Vendor Advisory
securityfocus.com/bid/35987
vupen.com/english/advisories/2009/2217
GitHub Advisory GHSA-5432-c996-hvhj · ADVISORY

Altre vulnerabilità di zodb3

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free