CVE-2000-1211
Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.
- Score
- CVSS 2.0 7.5 High
- Status
- Modified - cve@mitre.org
- Published
- 2000-12-16
- Last modified
- 2024-08-08
Affected products
References
- http://www.iss.net/security_center/static/5824.php
- http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-083.php3
- http://www.osvdb.org/6282
- http://www.redhat.com/support/errata/RHSA-2000-125.html
- http://www.zope.org/Products/Zope/Hotfix_2000-12-08/security_alert
