CVE-2009-0668

Unspecified vulnerability in Zope Object Database ZODB before 3.8.2, when certain Zope Enterprise Objects ZEO database sharing is enabled, allows remote attackers to execute arbitrary Python code via vectors involving the ZEO network protocol...

CVE-2009-0669

CVE-2009-0669 is a ZODB/ZEO authentication bypass vulnerability in ZEO storage servers, present in ZODB versions prior to 3.8.2 when ZEO database sharing is enabled. The issue arises because an internal authorization method in the StorageServer component was not used, allowing a remote attacker t...

CVE-2009-0668

CVE-2009-0668 describes an arbitrary Python code execution vulnerability in Zope Object Database (ZODB) when ZEO-based storage sharing is enabled. The ZEO server may unpickle data from a malicious client and import modules contained in a pickle, enabling remote code execution. CVE-2009-0669 relat...

CVE-2009-0669

Zope Object Database ZODB before 3.8.2, when certain Zope Enterprise Objects ZEO database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol...

CVE-2009-0668

Unspecified vulnerability in Zope Object Database ZODB before 3.8.2, when certain Zope Enterprise Objects ZEO database sharing is enabled, allows remote attackers to execute arbitrary Python code via vectors involving the ZEO network protocol...

CVE-2009-0668

Removed by vendor...

CVE-2009-0669

Removed by vendor...

CVE-2009-0669: Improper Authentication

Zope Object Database ZODB before 3.8.2, when certain Zope Enterprise Objects ZEO database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol...

CVE-2009-0668: Improper Control of Generation of Code

Unspecified vulnerability in Zope Object Database ZODB before 3.8.2, when certain Zope Enterprise Objects ZEO database sharing is enabled, allows remote attackers to execute arbitrary Python code via vectors involving the ZEO network protocol...

CVE-2008-1319

Untrusted search path and argument injection vulnerability in the VersantD service in Versant Object Database 7.0.1.3 and earlier, as used in Borland CaliberRM and probably other products, allows remote attackers to execute arbitrary commands via a request to TCP port 5019 with a modified...

CVE-2008-1319

The CVE-2008-1319 issue affects Versant Object Database (VersantD service) up to version 7.0.1.3. The vulnerability arises from an untrusted search path and argument injection in the VersantD service that can be exploited by sending a crafted request to TCP port 5019 with a modified VERSANT_ROOT ...

CVE-2008-1319: Undefined Security Weakness

Untrusted search path and argument injection vulnerability in the VersantD service in Versant Object Database 7.0.1.3 and earlier, as used in Borland CaliberRM and probably other products, allows remote attackers to execute arbitrary commands via a request to TCP port 5019 with a modified...

Versant Connection Services Daemon Arbitrary Command Execution

The version of the Versant Object Database installed on the remote host accepts input supplied by the client and uses it to launch needed programs or locate database files. An unauthenticated, remote attacker can leverage this issue to execute arbitrary commands on the affected host subject to th...

Versant Connection Services Daemon Detection

The remote service is a Versant connection services daemon, a component of the Versant Object Database software responsible for managing connections to the database. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description...

Versant Object Database Version Detection

Binary data 4416.prm...

Versant Object Database <= 7.0.1.3 Commands Execution Exploit

No description provided by source. Versant server = 7.0.1.3 Arbitrary Commands Execution Exploit http://www.milw0rm.com/sploits/2008-versantcmd.zip milw0rm.com...

Versant Object Database code execution

TCP/5019 client-supplied application execution...

Arbitrary commands execution in Versant Object Database 7.0.1.3

Luigi Auriemma Application: Versant Object Database http://www.versant.com/enUS/products/objectdatabase Versions: = 7.0.1.3 Platforms: Windows, Solaris, HP-UX, AIX, Linux Bug: arbitrary commands execution Exploitation: remote Date: 04 Mar 2008 Author: Luigi Auriemma e-mail: [email protected]...

Versant Object Database 7.0.1.3 - Commands Execution

Versant Object Database 7.0.1.3 - Commands Execution Versant server = 7.0.1.3 Arbitrary Commands Execution Exploit Exploit-DB Mirror: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/5213.zip 2008-versantcmd.zip milw0rm.com 2008-03-04...

Versant Object Database <= 7.0.1.3 Commands Execution Exploit

Exploit for unknown platform in category remote exploits ============================================================= Versant Object Database = 7.0.1.3 Commands Execution Exploit ============================================================= Versant server = 7.0.1.3 Arbitrary Commands Execution...