Lucene search

[email protected]CVE-2000-0483

HistoryJun 15, 2000 - 4:00 a.m.

CVE-2000-0483

2000-06-1504:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

zope 2.2

documenttemplate

vulnerability

remote attack

dtmldocuments

unauthorized modification

6.8 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.016 Low

EPSS

Percentile

87.2%

JSON

The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization.

CPENameOperatorVersion
zope:zopezopeeq1.10.3
redhat:linux_powertoolsredhat linux powertoolseq6.1
zope:zopezopeeq2.1.1
zope:zopezopeeq2.1.7
redhat:linux_powertoolsredhat linux powertoolseq6.2

CPE	Name	Operator	Version
zope:zope	zope	eq	1.10.3
redhat:linux_powertools	redhat linux powertools	eq	6.1
zope:zope	zope	eq	2.1.1
zope:zope	zope	eq	2.1.7
redhat:linux_powertools	redhat linux powertools	eq	6.2

References

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00%3A38.zope.asc

archives.neohapsis.com/archives/bugtraq/2000-06/0144.html

archives.neohapsis.com/archives/bugtraq/2000-07/0412.html

www.redhat.com/support/errata/RHSA-2000-038.html

www.securityfocus.com/bid/1354

www.securityfocus.com/templates/archive.pike?list=1&msg=20000616103807.A3768%40conectiva.com.br

www.zope.org/Products/Zope/Hotfix_06_16_2000/security_alert

exchange.xforce.ibmcloud.com/vulnerabilities/4716

6.8 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.016 Low

EPSS

Percentile

87.2%

JSON

Related for CVE-2000-0483

nessus1 github1 osv1