PT-2010-4863

Name of the Vulnerable Software and Affected Versions Zope Object Database ZODB versions prior to 3.10.0 Description The issue is related to a race condition in the ZEO/StorageServer.py module, allowing remote attackers to cause a denial of service by establishing and then immediately closing a T...

CVE-2009-2701: Undefined Security Weakness

Unspecified vulnerability in the Zope Enterprise Objects ZEO storage-server functionality in Zope Object Database ZODB 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing and blob support are enabled, allows remote authenticated users to read or delete arbitrary files via...

CVE-2009-0668: Improper Control of Generation of Code

Unspecified vulnerability in Zope Object Database ZODB before 3.8.2, when certain Zope Enterprise Objects ZEO database sharing is enabled, allows remote attackers to execute arbitrary Python code via vectors involving the ZEO network protocol...

CVE-2009-0669: Improper Authentication

Zope Object Database ZODB before 3.8.2, when certain Zope Enterprise Objects ZEO database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol...