PYSEC-2009-9
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/zodb3/PYSEC-2009-9.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2009-9
- Aliases
-
- CVE-2009-0669
- GHSA-5432-c996-hvhj
- Published
- 2009-08-07T19:30:00Z
- Modified
- 2024-04-01T20:11:37.258525Z
- Summary
- [none]
- Details
-
Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol.
- References
-
- http://secunia.com/advisories/36205
- http://mail.zope.org/pipermail/zope-announce/2009-August/002220.html
- http://pypi.python.org/pypi/ZODB3/3.8.2#whats-new-in-zodb-3-8-2
- http://secunia.com/advisories/36204
- http://osvdb.org/56826
- http://www.securityfocus.com/bid/35987
- http://www.vupen.com/english/advisories/2009/2217
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52379
Affected packages
PyPI / zodb3
Package
- Name
- zodb3
- View open source insights on deps.dev
- Purl
- pkg:pypi/zodb3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.8.2