Nessus Plugin #14892

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[DSA055] DSA-055-1 zope

Family:

Debian Local Security Checks

Category:

infos

Copyright:

This script is (C) 2004 Michel Arboi

Summary:

DSA-055-1 zope

Version:

$Revision: 1.4 $

Cve_id:

CVE-2001-0567

Bugtraq_id:

-

Xrefs:

DSA:055

Description:

A new Zope hotfix has been released which fixes a problem in ZClasses.
The README for the 2001-05-01 hotfix describes the problem as `any user
can visit a ZClass declaration and change the ZClass permission mappings
for methods and other objects defined within the ZClass, possibly
allowing for unauthorized access within the Zope instance.'

This hotfix has been added in version 2.1.6-10, and we highly recommend
that you upgrade your zope package immediately.



Solution : http://www.debian.org/security/2001/dsa-055
Risk factor : High