Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.
www.redhat.com/support/errata/RHSA-2000-125.html
www.zope.org/Products/Zope/Hotfix_2000-12-08/security_alert
nvd.nist.gov/vuln/detail/CVE-2000-1211
web.archive.org/web/20010910131909/www.linux-mandrake.com/en/security/2000/MDKSA-2000-083.php3
web.archive.org/web/20021227061438/www.iss.net/security_center/static/5824.php