CVE-2009-0669

Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol.

🔗 References (16)

• cve@mitrehttp://mail.zope.org/pipermail/zope-announce/2009-August/002220.html
• cve@mitrehttp://osvdb.org/56826
• cve@mitrehttp://pypi.python.org/pypi/ZODB3/3.8.2#whats-new-in-zodb-3-8-2
• cve@mitrehttp://secunia.com/advisories/36204
• cve@mitrehttp://secunia.com/advisories/36205
• cve@mitrehttp://www.securityfocus.com/bid/35987
• cve@mitrehttp://www.vupen.com/english/advisories/2009/2217
• cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/52379
• af854a3a-2127-422b-91ae-364da2661108http://mail.zope.org/pipermail/zope-announce/2009-August/002220.html
• af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/56826
• af854a3a-2127-422b-91ae-364da2661108http://pypi.python.org/pypi/ZODB3/3.8.2#whats-new-in-zodb-3-8-2
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/36204
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/36205
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/35987
• af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2009/2217