CVE-2009-0669: Zope Object Database (ZODB) Authentication… – CVSS 7.5 · Watchpost

← All vulnerabilities

Zope Object Database (ZODB) Authentication bypass in ZEO storage servers

ALTO 7.5CVE-2009-0669 · GHSA-5432-c996-hvhj · PYSEC-2009-9 · Published 07/08/2009 · updated 16/06/2026

Em resumo

CVE-2009-0669 é uma vulnerabilidade ALTO (CVSS 7.5) que afeta zodb3, zodb (zope).
Chance de exploração nos próximos 30 dias (EPSS): 2.9%, maior que 86.8% das vulnerabilidades.
Correção: atualize para 3.8.2 ou posterior.

Package	Affected versions	Patched versions
zodb3 PyPI	`< 3.8.2`	`3.8.2`
zodb zope	`= 3.8= 3.8.0≤ 3.8.1`	No fix yet

Description

Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol.

NVD description

Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol.

References

nvd.nist.gov/vuln/detail/CVE-2009-0669 · ADVISORY
exchange.xforce.ibmcloud.com/vulnerabilities/52379 · WEB
pypa/advisory-database · WEB
zopefoundation/ZODB3 · PACKAGE
mail.zope.org/pipermail/zope-announce/2009-August/002220.html · WEB
pypi.python.org/pypi/ZODB3/3.8.2 · WEB
osvdb.org/56826
secunia.com/advisories/36204 · Vendor Advisory
secunia.com/advisories/36205 · Vendor Advisory
securityfocus.com/bid/35987
vupen.com/english/advisories/2009/2217
GitHub Advisory GHSA-5432-c996-hvhj · ADVISORY

Mais vulnerabilidades de zodb3

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free