CVE-2009-2701
Summary
| CVE | CVE-2009-2701 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2009-09-08 18:30:00 UTC |
| Updated | 2009-09-09 04:00:00 UTC |
| Description | Unspecified vulnerability in the Zope Enterprise Objects (ZEO) storage-server functionality in Zope Object Database (ZODB) 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing and blob support are enabled, allows remote authenticated users to read or delete arbitrary files via unknown vectors. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Zope | Zodb | 3.8 | All | All | All |
| Application | Zope | Zodb | 3.8.0 | All | All | All |
| Application | Zope | Zodb | 3.8.1 | All | All | All |
| Application | Zope | Zodb | 3.8.2 | All | All | All |
| Application | Zope | Zodb | 3.9.0 | All | All | All |
| Application | Zope | Zodb | 3.9.0b1 | All | All | All |
| Application | Zope | Zodb | 3.9.0b2 | All | All | All |
| Application | Zope | Zodb | 3.9.0b3 | All | All | All |
| Application | Zope | Zodb | 3.9.0b4 | All | All | All |
| Application | Zope | Zodb | 3.9.0b5 | All | All | All |
| Application | Zope | Zodb | 3.9.0c1 | All | All | All |
| Application | Zope | Zodb | 3.8 | All | All | All |
| Application | Zope | Zodb | 3.8.0 | All | All | All |
| Application | Zope | Zodb | 3.8.1 | All | All | All |
| Application | Zope | Zodb | 3.8.2 | All | All | All |
| Application | Zope | Zodb | 3.9.0 | All | All | All |
| Application | Zope | Zodb | 3.9.0b1 | All | All | All |
| Application | Zope | Zodb | 3.9.0b2 | All | All | All |
| Application | Zope | Zodb | 3.9.0b3 | All | All | All |
| Application | Zope | Zodb | 3.9.0b4 | All | All | All |
| Application | Zope | Zodb | 3.9.0b5 | All | All | All |
| Application | Zope | Zodb | 3.9.0c1 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| [Zope-Annce] CVE-2009-2701: Releases to fix ZODB ZEO server vulnerability | MLIST | mail.zope.org | Patch |
| Python Package Index : ZODB3 3.9.0c2 | CONFIRM | pypi.python.org | Patch |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | Patch, Vendor Advisory |
| Python Package Index : ZODB3 3.8.3 | CONFIRM | pypi.python.org | Patch |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.