CVE-2009-0669

2009-08-0700:00:00

ubuntu.com

0.018 Low

EPSS

Percentile

88.1%

JSON

Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise
Objects (ZEO) database sharing is enabled, allows remote attackers to
bypass authentication via vectors involving the ZEO network protocol.

Bugs

<http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=540462>

Notes

Author	Note
mdeslaur	included in CVE-2009-0668 patch

OSVersionArchitecturePackageVersionFilename
ubuntu8.10noarchzope2.10< 2.10.6-1+lenny1build0.8.10.1UNKNOWN
ubuntu9.04noarchzope2.10< 2.10.6-1+lenny1build0.9.04.1UNKNOWN
ubuntu6.06noarchzope3< 3.2.1-1ubuntu1.2UNKNOWN
ubuntu8.04noarchzope3< 3.3.1-5ubuntu2.2UNKNOWN
ubuntu8.10noarchzope3< 3.3.1-7ubuntu0.2UNKNOWN
ubuntu9.04noarchzope3< 3.4.0-0ubuntu3.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.10	noarch	zope2.10	< 2.10.6-1+lenny1build0.8.10.1	UNKNOWN
ubuntu	9.04	noarch	zope2.10	< 2.10.6-1+lenny1build0.9.04.1	UNKNOWN
ubuntu	6.06	noarch	zope3	< 3.2.1-1ubuntu1.2	UNKNOWN
ubuntu	8.04	noarch	zope3	< 3.3.1-5ubuntu2.2	UNKNOWN
ubuntu	8.10	noarch	zope3	< 3.3.1-7ubuntu0.2	UNKNOWN
ubuntu	9.04	noarch	zope3	< 3.4.0-0ubuntu3.3	UNKNOWN