Zope Object Database (ZODB) Authentication bypass in ZEO storage servers

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2009-0669 · ADVISORY
• exchange.xforce.ibmcloud.com/vulnerabilities/52379 · WEB
• pypa/advisory-database · WEB
• zopefoundation/ZODB3 · PACKAGE
• mail.zope.org/pipermail/zope-announce/2009-August/002220.html · WEB
• pypi.python.org/pypi/ZODB3/3.8.2 · WEB
• osvdb.org/56826
• secunia.com/advisories/36204 · Vendor Advisory
• secunia.com/advisories/36205 · Vendor Advisory
• securityfocus.com/bid/35987
• vupen.com/english/advisories/2009/2217
• GitHub Advisory GHSA-5432-c996-hvhj · ADVISORY

zodb3 のその他の脆弱性

• CVE-2010-3495中 4.3Race condition in ZEO/StorageServer.py in Zope Object Database (ZODB) before 3.10.0 allows remote attackers to cause a denial of service (da…
• CVE-2009-2701中 6.0Unspecified vulnerability in the Zope Enterprise Objects (ZEO) storage-server functionality in Zope Object Database (ZODB) 3.8 before 3.8.3 …
• CVE-2009-0668中 6.5Unspecified vulnerability in Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enable…