CVEvulnerability
CVE-2009-0668
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-08-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-94
Description
Unspecified vulnerability in Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to execute arbitrary Python code via vectors involving the ZEO network protocol.
Affected configurations
• zope zodb (<= 3.8.1)
• zope zodb 2.8.11
• zope zodb 2.9.11
• zope zodb 2.10.9
• zope zodb 2.11.4
• zope zodb 3.1
• zope zodb 3.1.1
• zope zodb 3.2
• zope zodb 3.2.4
• zope zodb 3.3
• zope zodb 3.3.3
• zope zodb 3.4
• zope zodb 3.4.1
• zope zodb 3.5
• zope zodb 3.6
• zope zodb 3.7
• zope zodb 3.8.0
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://mail.zope.org/pipermail/zope-announce/2009-August/002220.html mail.zope.org
- http://osvdb.org/56827 osvdb.org
- http://pypi.python.org/pypi/ZODB3/3.8.2#whats-new-in-zodb-3-8-2 pypi.python.org
- http://secunia.com/advisories/36204 Vendor Advisory
- http://secunia.com/advisories/36205 Vendor Advisory
- http://www.securityfocus.com/bid/35987 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/2217 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52377 exchange.xforce.ibmcloud.com
- http://mail.zope.org/pipermail/zope-announce/2009-August/002220.html mail.zope.org
- http://osvdb.org/56827 osvdb.org
- http://pypi.python.org/pypi/ZODB3/3.8.2#whats-new-in-zodb-3-8-2 pypi.python.org
- http://secunia.com/advisories/36204 Vendor Advisory
- http://secunia.com/advisories/36205 Vendor Advisory
- http://www.securityfocus.com/bid/35987 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/2217 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52377 exchange.xforce.ibmcloud.com