CVE-2002-0687: Medium severity Zope Zope vulnerability
The "through the web code" capability for Zope 2.0 through 2.5.1 b1 allows untrusted users to shut down the Zope server via certain headers.
Other sources
Zope is a Web application server for Linux. Zope versions 2.0 through 2.5.1 b1 are vulnerable to a denial of service attack, caused by a vulnerability that occurs when using the "through the Web code" capability. A remote attacker could inject malicious headers into a response to cause the vulnerable system to crash.
— GitHub
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0687?
CVE-2002-0687 has a high severity level due to its potential to cause a denial of service by allowing untrusted users to shut down the Zope server.
How do I fix CVE-2002-0687?
To fix CVE-2002-0687, upgrade Zope to version 2.5.1b2 or later, or to version 2.4.4b2 if on an earlier version.
What versions of Zope are affected by CVE-2002-0687?
Zope versions 2.0 through 2.5.1b1 are affected by CVE-2002-0687.
What type of attack does CVE-2002-0687 facilitate?
CVE-2002-0687 facilitates a denial of service attack by enabling untrusted users to shut down the Zope server.
Is there a patch for CVE-2002-0687?
Yes, the patch for CVE-2002-0687 is included in the updates to Zope versions 2.5.1b2 and 2.4.4b2.