CVE-2008-5102 : Detail

CVE-2008-5102

2.73%V3
Network
2008-11-17
17h00 +00:00
2009-09-01
07h00 +00:00
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

PythonScripts in Zope 2 2.11.2 and earlier, as used in Conga and other products, allows remote authenticated users to cause a denial of service (resource consumption or application halt) via certain (1) raise or (2) import statements.

CVE Informations

Related Weaknesses

CWE-ID Weakness Name Source
CWE-399 Category : Resource Management Errors
Weaknesses in this category are related to improper management of system resources.

Metrics

Metrics Score Severity CVSS Vector Source
V2 4 AV:N/AC:L/Au:S/C:N/I:N/A:P nvd@nist.gov

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Exploit information

Exploit Database EDB-ID : 32581

Publication date : 2008-11-11 23h00 +00:00
Author : Marc-Andre Lemburg
EDB Verified : Yes

source: https://www.securityfocus.com/bid/32267/info Zope is prone to multiple remote denial-of-service vulnerabilities. Remote attackers can exploit this issue to cause the Zope server to halt or to consume excessive server resources, resulting in denial-of-service conditions. These issues affect Zope 2.7.0 through 2.11.2. To halt the application: raise SystemExit To consume excessive resources: return 'foo'.encode('test.testall')

Products Mentioned

Configuraton 0

Zope>>Zope >> Version To (including) 2.11.2

Zope>>Zope >> Version 1.10.3

    Zope>>Zope >> Version 1.10.4

      Zope>>Zope >> Version 2.0.0

        Zope>>Zope >> Version 2.0.0a4

          Zope>>Zope >> Version 2.0.0b4

            Zope>>Zope >> Version 2.0.0b5

              Zope>>Zope >> Version 2.0.0b6

                Zope>>Zope >> Version 2.0.1

                  Zope>>Zope >> Version 2.1.0

                    Zope>>Zope >> Version 2.1.0b1

                      Zope>>Zope >> Version 2.1.0b2

                        Zope>>Zope >> Version 2.1.1

                          Zope>>Zope >> Version 2.1.2

                            Zope>>Zope >> Version 2.1.3

                              Zope>>Zope >> Version 2.1.4

                                Zope>>Zope >> Version 2.1.5

                                  Zope>>Zope >> Version 2.1.6

                                    Zope>>Zope >> Version 2.2.0

                                      Zope>>Zope >> Version 2.2.0a1

                                        Zope>>Zope >> Version 2.2.0b1

                                          Zope>>Zope >> Version 2.2.0b2

                                            Zope>>Zope >> Version 2.2.0b3

                                              Zope>>Zope >> Version 2.2.0b4

                                                Zope>>Zope >> Version 2.2.1

                                                  Zope>>Zope >> Version 2.2.1b1

                                                    Zope>>Zope >> Version 2.2.2

                                                      Zope>>Zope >> Version 2.2.3

                                                        Zope>>Zope >> Version 2.2.4

                                                          Zope>>Zope >> Version 2.2.4b1

                                                            Zope>>Zope >> Version 2.2.5

                                                              Zope>>Zope >> Version 2.2.5b1

                                                                Zope>>Zope >> Version 2.3.0

                                                                  Zope>>Zope >> Version 2.3.0a1

                                                                    Zope>>Zope >> Version 2.3.0a2

                                                                      Zope>>Zope >> Version 2.3.0b1

                                                                        Zope>>Zope >> Version 2.3.0b2

                                                                          Zope>>Zope >> Version 2.3.0b3

                                                                            Zope>>Zope >> Version 2.3.1

                                                                              Zope>>Zope >> Version 2.3.1b1

                                                                                Zope>>Zope >> Version 2.3.1b2

                                                                                  Zope>>Zope >> Version 2.3.1b3

                                                                                    Zope>>Zope >> Version 2.3.2

                                                                                      Zope>>Zope >> Version 2.3.2b1

                                                                                        Zope>>Zope >> Version 2.3.2b2

                                                                                          Zope>>Zope >> Version 2.3.3

                                                                                            Zope>>Zope >> Version 2.3.3b1

                                                                                              Zope>>Zope >> Version 2.4.0

                                                                                                Zope>>Zope >> Version 2.4.0a1

                                                                                                  Zope>>Zope >> Version 2.4.0b1

                                                                                                    Zope>>Zope >> Version 2.4.0b2

                                                                                                      Zope>>Zope >> Version 2.4.0b3

                                                                                                        Zope>>Zope >> Version 2.4.1

                                                                                                          Zope>>Zope >> Version 2.4.1b1

                                                                                                            Zope>>Zope >> Version 2.4.2

                                                                                                              Zope>>Zope >> Version 2.4.2b1

                                                                                                                Zope>>Zope >> Version 2.4.3

                                                                                                                  Zope>>Zope >> Version 2.4.3

                                                                                                                    Zope>>Zope >> Version 2.4.3b1

                                                                                                                      Zope>>Zope >> Version 2.4.4

                                                                                                                        Zope>>Zope >> Version 2.4.4

                                                                                                                          Zope>>Zope >> Version 2.4.4b1

                                                                                                                            Zope>>Zope >> Version 2.5.0

                                                                                                                              Zope>>Zope >> Version 2.5.0a1

                                                                                                                                Zope>>Zope >> Version 2.5.0a2

                                                                                                                                  Zope>>Zope >> Version 2.5.0b1

                                                                                                                                    Zope>>Zope >> Version 2.5.1

                                                                                                                                    Zope>>Zope >> Version 2.5.1

                                                                                                                                      Zope>>Zope >> Version 2.5.1b1

                                                                                                                                        Zope>>Zope >> Version 2.5.1b2

                                                                                                                                          Zope>>Zope >> Version 2.6.0

                                                                                                                                          Zope>>Zope >> Version 2.6.0a1

                                                                                                                                            Zope>>Zope >> Version 2.6.0b1

                                                                                                                                              Zope>>Zope >> Version 2.6.0b2

                                                                                                                                                Zope>>Zope >> Version 2.6.1

                                                                                                                                                Zope>>Zope >> Version 2.6.1

                                                                                                                                                  Zope>>Zope >> Version 2.6.1.b1

                                                                                                                                                    Zope>>Zope >> Version 2.6.2

                                                                                                                                                      Zope>>Zope >> Version 2.6.2.b1

                                                                                                                                                        Zope>>Zope >> Version 2.6.2.b2

                                                                                                                                                          Zope>>Zope >> Version 2.6.2.b3

                                                                                                                                                            Zope>>Zope >> Version 2.6.2.b4

                                                                                                                                                              Zope>>Zope >> Version 2.6.2.b5

                                                                                                                                                                Zope>>Zope >> Version 2.6.2.b6

                                                                                                                                                                  Zope>>Zope >> Version 2.6.3

                                                                                                                                                                    Zope>>Zope >> Version 2.6.4

                                                                                                                                                                    Zope>>Zope >> Version 2.6.4

                                                                                                                                                                      Zope>>Zope >> Version 2.6.4

                                                                                                                                                                        Zope>>Zope >> Version 2.7.0-a1

                                                                                                                                                                          Zope>>Zope >> Version 2.7.0-b1

                                                                                                                                                                            Zope>>Zope >> Version 2.7.0-b2

                                                                                                                                                                              Zope>>Zope >> Version 2.7.0-b3

                                                                                                                                                                                Zope>>Zope >> Version 2.7.0-b4

                                                                                                                                                                                  Zope>>Zope >> Version 2.7.0-c1

                                                                                                                                                                                    Zope>>Zope >> Version 2.7.0-c2

                                                                                                                                                                                      Zope>>Zope >> Version 2.7.0-final

                                                                                                                                                                                        Zope>>Zope >> Version 2.7.1-b1

                                                                                                                                                                                          Zope>>Zope >> Version 2.7.1-b2

                                                                                                                                                                                            Zope>>Zope >> Version 2.7.1-final

                                                                                                                                                                                              Zope>>Zope >> Version 2.7.2-c1

                                                                                                                                                                                                Zope>>Zope >> Version 2.7.2-final

                                                                                                                                                                                                  Zope>>Zope >> Version 2.7.3-b1

                                                                                                                                                                                                    Zope>>Zope >> Version 2.7.3-b2

                                                                                                                                                                                                      Zope>>Zope >> Version 2.7.3-final

                                                                                                                                                                                                        Zope>>Zope >> Version 2.7.4-b1

                                                                                                                                                                                                          Zope>>Zope >> Version 2.7.4-b2

                                                                                                                                                                                                            Zope>>Zope >> Version 2.7.4-c1

                                                                                                                                                                                                              Zope>>Zope >> Version 2.7.4-c2

                                                                                                                                                                                                                Zope>>Zope >> Version 2.7.4-final

                                                                                                                                                                                                                  Zope>>Zope >> Version 2.7.5-b1

                                                                                                                                                                                                                    Zope>>Zope >> Version 2.7.5-c1

                                                                                                                                                                                                                      Zope>>Zope >> Version 2.7.5-final

                                                                                                                                                                                                                        Zope>>Zope >> Version 2.7.6-b1

                                                                                                                                                                                                                          Zope>>Zope >> Version 2.7.6-b2

                                                                                                                                                                                                                            Zope>>Zope >> Version 2.7.6-final

                                                                                                                                                                                                                              Zope>>Zope >> Version 2.7.7-b1

                                                                                                                                                                                                                                Zope>>Zope >> Version 2.7.7-final

                                                                                                                                                                                                                                  Zope>>Zope >> Version 2.7.8

                                                                                                                                                                                                                                  Zope>>Zope >> Version 2.7.9

                                                                                                                                                                                                                                    Zope>>Zope >> Version 2.8.0-a1

                                                                                                                                                                                                                                      Zope>>Zope >> Version 2.8.0-a2

                                                                                                                                                                                                                                        Zope>>Zope >> Version 2.8.0-b1

                                                                                                                                                                                                                                          Zope>>Zope >> Version 2.8.0-b2

                                                                                                                                                                                                                                            Zope>>Zope >> Version 2.8.0-final

                                                                                                                                                                                                                                              Zope>>Zope >> Version 2.8.1-b1

                                                                                                                                                                                                                                                Zope>>Zope >> Version 2.8.1-final

                                                                                                                                                                                                                                                  Zope>>Zope >> Version 2.8.2

                                                                                                                                                                                                                                                  Zope>>Zope >> Version 2.8.3

                                                                                                                                                                                                                                                  Zope>>Zope >> Version 2.8.4

                                                                                                                                                                                                                                                  Zope>>Zope >> Version 2.8.5

                                                                                                                                                                                                                                                  Zope>>Zope >> Version 2.8.6

                                                                                                                                                                                                                                                  Zope>>Zope >> Version 2.8.7

                                                                                                                                                                                                                                                  Zope>>Zope >> Version 2.8.8

                                                                                                                                                                                                                                                  Zope>>Zope >> Version 2.8.9

                                                                                                                                                                                                                                                  Zope>>Zope >> Version 2.8.9.1

                                                                                                                                                                                                                                                  Zope>>Zope >> Version 2.8.10

                                                                                                                                                                                                                                                  Zope>>Zope >> Version 2.9.0-b1

                                                                                                                                                                                                                                                    Zope>>Zope >> Version 2.9.0-b2

                                                                                                                                                                                                                                                      Zope>>Zope >> Version 2.9.0-final

                                                                                                                                                                                                                                                        Zope>>Zope >> Version 2.9.1

                                                                                                                                                                                                                                                        Zope>>Zope >> Version 2.9.2

                                                                                                                                                                                                                                                        Zope>>Zope >> Version 2.9.3

                                                                                                                                                                                                                                                        Zope>>Zope >> Version 2.9.4

                                                                                                                                                                                                                                                        Zope>>Zope >> Version 2.9.5

                                                                                                                                                                                                                                                        Zope>>Zope >> Version 2.9.6

                                                                                                                                                                                                                                                        Zope>>Zope >> Version 2.9.7

                                                                                                                                                                                                                                                        Zope>>Zope >> Version 2.9.8

                                                                                                                                                                                                                                                        Zope>>Zope >> Version 2.9.9

                                                                                                                                                                                                                                                        Zope>>Zope >> Version 2.9.10

                                                                                                                                                                                                                                                        Zope>>Zope >> Version 2.10.0-b1

                                                                                                                                                                                                                                                          Zope>>Zope >> Version 2.10.0-b2

                                                                                                                                                                                                                                                            Zope>>Zope >> Version 2.10.0-c1

                                                                                                                                                                                                                                                              Zope>>Zope >> Version 2.10.0-final

                                                                                                                                                                                                                                                                Zope>>Zope >> Version 2.10.2-b1

                                                                                                                                                                                                                                                                  Zope>>Zope >> Version 2.10.2-final

                                                                                                                                                                                                                                                                    Zope>>Zope >> Version 2.10.3-final

                                                                                                                                                                                                                                                                      Zope>>Zope >> Version 2.10.4-final

                                                                                                                                                                                                                                                                        Zope>>Zope >> Version 2.10.5

                                                                                                                                                                                                                                                                        Zope>>Zope >> Version 2.10.6

                                                                                                                                                                                                                                                                        Zope>>Zope >> Version 2.10.7

                                                                                                                                                                                                                                                                        Zope>>Zope >> Version 2.11.0

                                                                                                                                                                                                                                                                        Zope>>Zope >> Version 2.11.1

                                                                                                                                                                                                                                                                        References

                                                                                                                                                                                                                                                                        http://www.vupen.com/english/advisories/2008/2418
                                                                                                                                                                                                                                                                        Tags : vdb-entry, x_refsource_VUPEN
                                                                                                                                                                                                                                                                        http://openwall.com/lists/oss-security/2008/11/12/2
                                                                                                                                                                                                                                                                        Tags : mailing-list, x_refsource_MLIST