CVE-2009-0669: PYSEC-2009-9 - Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to

CVE-2009-0669 · Severity: low · CVSS 3.1 · Published 2009-08-07

Technologies: zodb3 (PyPI). Vendors: PyPI.

Executive brief

Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol.

Affected products

PyPI zodb3

Related threats

PYSEC-2010-27 - Race condition in ZEO/StorageServer.py in Zope Object Database (ZODB) before 3.10.0 allows remote attackers to cause a denial of service (da
PYSEC-2009-10 - Unspecified vulnerability in the Zope Enterprise Objects (ZEO) storage-server functionality in Zope Object Database (ZODB) 3.8 before 3.8.3
PYSEC-2009-8 - Unspecified vulnerability in Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enable