Unscored severity · published Mar 12, 2001
CVE-2001-0128
Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges
–
CVSS
0.4%
EPSS
No
On KEV
Description
Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 36% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DL
Debian Linux · Debian
2.2 · source: NVD
FR
Freebsd · Freebsd
6.2 · source: NVD
LI
Linux · Conectiva
4.2; 5.0; 5.1; 6.0 · source: NVD
LP
Linux Powertools · Redhat
6.1; 6.2; 7.0 · source: NVD
ML
Mandrake Linux · Mandrakesoft
7.1; 7.2 · source: NVD
ZO
Zope · Zope
through 2.2.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-0128
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-0128
distro.conectiva.com.br
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000365
Patch
http://www.debian.org/security/2000/20001219
Patch
http://www.linux-mandrake.com/en/updates/2000/MDKSA-2000-083.php3
www.osvdb.org
http://www.osvdb.org/6284
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2000-127.html
More from Linux
9.8
CVE-2002-0083
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges
–
CVE-2005-3626
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted…
–
CVE-2005-3625
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams…
–
CVE-2005-3624
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via…
–
CVE-2005-0207
Unknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x allows NFS clients to cause a denial of service via O_DIRECT