← back
CVE-2008-5102

CVE-2008-5102

EPSS 4.0%
PythonScripts in Zope 2 2.11.2 and earlier, as used in Conga and other products, allows remote authenticated users to cause a denial of service (resource consumption or application halt) via certain (1) raise or (2) import statements.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/32581unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://bugs.gentoo.org/show_bug.cgi?id=246411http://mail.zope.org/pipermail/zope/2008-August/174025.htmlhttp://openwall.com/lists/oss-security/2008/11/12/2https://bugs.launchpad.net/zope2/+bug/257269https://bugs.launchpad.net/zope2/+bug/257276http://www.vupen.com/english/advisories/2008/2418http://www.zope.org/Products/Zope/Hotfix-2008-08-12/Hotfix_20080812-1.1.0.tar.gzhttp://www.zope.org/Products/Zope/Hotfix-2008-08-12/README.txt