CVE-2001-0128: High severity Zope Zope vulnerability
Published Mar 12, 2001
·Updated
Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges.
Affected Software
15 affected components
Zope Zope<=2.2.4
Conectiva Linux=4.2
Conectiva Linux=6.0
Conectiva Linux=5.1
redhat Linux Powertools=6.1
redhat Linux Powertools=7.0
Conectiva Linux=5.0
redhat Linux Powertools=6.2
Mandrakesoft Mandrake Linux=7.2
Debian Debian Linux=2.2
redhat Linux=7.0
redhat Linux=6.1
redhat Linux=6.2
Mandrakesoft Mandrake Linux=7.1
FreeBSD FreeBSD=6.2-stable
Remediation
Patch Available
Event History
Mar 12, 2001
CVE Published
05:00 AM
May 7, 2001
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-0128?
CVE-2001-0128 is classified as a medium severity vulnerability due to its potential to allow users to bypass access controls.
2
How do I fix CVE-2001-0128?
To fix CVE-2001-0128, upgrade Zope to version 2.2.4 or later.
3
What types of systems are affected by CVE-2001-0128?
CVE-2001-0128 affects multiple Linux distributions and Zope versions prior to 2.2.4.
4
Who is impacted by CVE-2001-0128?
Users of Zope prior to version 2.2.4 may be impacted by CVE-2001-0128 due to improper local role computations.
5
Is there a workaround for CVE-2001-0128?
There are no known workarounds for CVE-2001-0128, so upgrading to a patched version is recommended.