CVE-2011-3587
Summary
| CVE | CVE-2011-3587 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2011-10-10 10:55:06 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p_ class in OFS/misc_.py and the use of Python modules. |
Risk And Classification
Primary CVSS: v2.0 9.3 from [email protected]
AV:N/AC:M/Au:N/C:C/I:C/A:C
Problem Types: NVD-CWE-noinfo | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:N/AC:M/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Plone | Plone | 4.0 | All | All | All |
| Application | Plone | Plone | 4.0.1 | All | All | All |
| Application | Plone | Plone | 4.0.2 | All | All | All |
| Application | Plone | Plone | 4.0.3 | All | All | All |
| Application | Plone | Plone | 4.0.4 | All | All | All |
| Application | Plone | Plone | 4.0.5 | All | All | All |
| Application | Plone | Plone | 4.0.6.1 | All | All | All |
| Application | Plone | Plone | 4.0.7 | All | All | All |
| Application | Plone | Plone | 4.0.8 | All | All | All |
| Application | Plone | Plone | 4.0.9 | All | All | All |
| Application | Plone | Plone | 4.1 | All | All | All |
| Application | Plone | Plone | 4.2 | All | All | All |
| Application | Plone | Plone | 4.2a1 | All | All | All |
| Application | Plone | Plone | 4.2a2 | All | All | All |
| Application | Zope | Zope | 2.12.0 | All | All | All |
| Application | Zope | Zope | 2.12.0 | a1 | All | All |
| Application | Zope | Zope | 2.12.0 | a2 | All | All |
| Application | Zope | Zope | 2.12.0 | a3 | All | All |
| Application | Zope | Zope | 2.12.0 | a4 | All | All |
| Application | Zope | Zope | 2.12.0 | b1 | All | All |
| Application | Zope | Zope | 2.12.0 | b2 | All | All |
| Application | Zope | Zope | 2.12.0 | b3 | All | All |
| Application | Zope | Zope | 2.12.0 | b4 | All | All |
| Application | Zope | Zope | 2.12.1 | All | All | All |
| Application | Zope | Zope | 2.12.10 | All | All | All |
| Application | Zope | Zope | 2.12.11 | All | All | All |
| Application | Zope | Zope | 2.12.12 | All | All | All |
| Application | Zope | Zope | 2.12.13 | All | All | All |
| Application | Zope | Zope | 2.12.14 | All | All | All |
| Application | Zope | Zope | 2.12.15 | All | All | All |
| Application | Zope | Zope | 2.12.16 | All | All | All |
| Application | Zope | Zope | 2.12.17 | All | All | All |
| Application | Zope | Zope | 2.12.18 | All | All | All |
| Application | Zope | Zope | 2.12.19 | All | All | All |
| Application | Zope | Zope | 2.12.2 | All | All | All |
| Application | Zope | Zope | 2.12.20 | All | All | All |
| Application | Zope | Zope | 2.12.3 | All | All | All |
| Application | Zope | Zope | 2.12.4 | All | All | All |
| Application | Zope | Zope | 2.12.5 | All | All | All |
| Application | Zope | Zope | 2.12.6 | All | All | All |
| Application | Zope | Zope | 2.12.7 | All | All | All |
| Application | Zope | Zope | 2.12.8 | All | All | All |
| Application | Zope | Zope | 2.12.9 | All | All | All |
| Application | Zope | Zope | 2.13.0 | All | All | All |
| Application | Zope | Zope | 2.13.0 | a1 | All | All |
| Application | Zope | Zope | 2.13.0 | a2 | All | All |
| Application | Zope | Zope | 2.13.0 | a3 | All | All |
| Application | Zope | Zope | 2.13.0 | a4 | All | All |
| Application | Zope | Zope | 2.13.0 | b1 | All | All |
| Application | Zope | Zope | 2.13.0 | c1 | All | All |
| Application | Zope | Zope | 2.13.1 | All | All | All |
| Application | Zope | Zope | 2.13.10 | All | All | All |
| Application | Zope | Zope | 2.13.2 | All | All | All |
| Application | Zope | Zope | 2.13.3 | All | All | All |
| Application | Zope | Zope | 2.13.4 | All | All | All |
| Application | Zope | Zope | 2.13.5 | All | All | All |
| Application | Zope | Zope | 2.13.6 | All | All | All |
| Application | Zope | Zope | 2.13.7 | All | All | All |
| Application | Zope | Zope | 2.13.8 | All | All | All |
| Application | Zope | Zope | 2.13.9 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Plone Two Vulnerabilities - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| 742297 – (CVE-2011-3587) CVE-2011-3587 zope: Unspecified vulnerability in Zope v2.12.x and Zope v2.13.x allowing arbitrary code execution | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.redhat.com | Patch |
| Zope Unspecified Command Execution Vulnerability - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| Security vulnerability announcement: 20110928 - Arbitrary Code Execution — Plone CMS: Open Source Content Management | af854a3a-2127-422b-91ae-364da2661108 | plone.org | Patch, Vendor Advisory |
| Security vulnerability announcement: CVE 2011-3587 — The Zope 2 Application Server | af854a3a-2127-422b-91ae-364da2661108 | zope2.zope.org | Patch |
| plone.org/products/plone-hotfix/releases/20110928/PloneHotfix20110928-1... | af854a3a-2127-422b-91ae-364da2661108 | plone.org | Patch |
| Products.PloneHotfix20110928 · PyPI | af854a3a-2127-422b-91ae-364da2661108 | pypi.python.org | Patch |
| Plone Hotfix 20110928 — Plone CMS: Open Source Content Management | af854a3a-2127-422b-91ae-364da2661108 | plone.org | Patch |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 996725 Python (Pip) Security Update for zope2 (GHSA-8w48-m6hx-rjw2)