46 matches found
PYSEC-2009-9
Zope Object Database ZODB before 3.8.2, when certain Zope Enterprise Objects ZEO database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol...
CVE-2009-0669
Zope Object Database ZODB before 3.8.2, when certain Zope Enterprise Objects ZEO database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol...
CVE-2009-0668
Unspecified vulnerability in Zope Object Database ZODB before 3.8.2, when certain Zope Enterprise Objects ZEO database sharing is enabled, allows remote attackers to execute arbitrary Python code via vectors involving the ZEO network protocol...
CVE-2009-0668
CVE-2009-0668 describes an arbitrary Python code execution vulnerability in Zope Object Database (ZODB) when ZEO-based storage sharing is enabled. The ZEO server may unpickle data from a malicious client and import modules contained in a pickle, enabling remote code execution. CVE-2009-0669 relat...