CVE-2011-3587 Zope Command Execution Vulnerability
HighCVSS 9.3
EPSS 78.1%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p_ class in OFS/misc_.py and the use of Python modules.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi zope2(PyPI) | >= 2.12.0, < 2.12.20 | 2.12.20 |
| pypi zope2(PyPI) | = 2.12.0 | No fix listed |
| pypi zope2(PyPI) | = 2.12.1 | No fix listed |
| pypi zope2(PyPI) | = 2.12.10 | No fix listed |
| pypi zope2(PyPI) | = 2.12.11 | No fix listed |
| pypi zope2(PyPI) | = 2.12.12 | No fix listed |
| pypi zope2(PyPI) | = 2.12.13 | No fix listed |
| pypi zope2(PyPI) | = 2.12.14 | No fix listed |
| pypi zope2(PyPI) | = 2.12.15 | No fix listed |
| pypi zope2(PyPI) | = 2.12.16 | No fix listed |
| pypi zope2(PyPI) | = 2.12.17 | No fix listed |
| pypi zope2(PyPI) | = 2.12.18 | No fix listed |
| pypi zope2(PyPI) | = 2.12.19 | No fix listed |
| pypi zope2(PyPI) | = 2.12.2 | No fix listed |
| pypi zope2(PyPI) | = 2.12.3 | No fix listed |
| pypi zope2(PyPI) | = 2.12.4 | No fix listed |
| pypi zope2(PyPI) | = 2.12.5 | No fix listed |
| pypi zope2(PyPI) | = 2.12.6 | No fix listed |
| pypi zope2(PyPI) | = 2.12.7 | No fix listed |
| pypi zope2(PyPI) | = 2.12.8 | No fix listed |
| pypi zope2(PyPI) | = 2.12.9 | No fix listed |
| pypi zope2(PyPI) | >= 2.13.0, < 2.13.10 | 2.13.10 |
| pypi zope2(PyPI) | = 2.13.0 | No fix listed |
| pypi zope2(PyPI) | = 2.13.1 | No fix listed |
| pypi zope2(PyPI) | = 2.13.2 | No fix listed |
Show 67 more
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi zope2(PyPI) | = 2.13.3 | No fix listed |
| pypi zope2(PyPI) | = 2.13.4 | No fix listed |
| pypi zope2(PyPI) | = 2.13.5 | No fix listed |
| pypi zope2(PyPI) | = 2.13.6 | No fix listed |
| pypi zope2(PyPI) | = 2.13.7 | No fix listed |
| pypi zope2(PyPI) | = 2.13.8 | No fix listed |
| pypi zope2(PyPI) | = 2.13.9 | No fix listed |
| plone | = 4.0 | No fix listed |
| plone | = 4.0.1 | No fix listed |
| plone | = 4.0.2 | No fix listed |
| plone | = 4.0.3 | No fix listed |
| plone | = 4.0.4 | No fix listed |
| plone | = 4.0.5 | No fix listed |
| plone | = 4.0.6.1 | No fix listed |
| plone | = 4.0.7 | No fix listed |
| plone | = 4.0.8 | No fix listed |
| plone | = 4.0.9 | No fix listed |
| plone | = 4.1 | No fix listed |
| plone | = 4.2 | No fix listed |
| plone | = 4.2a1 | No fix listed |
| plone | = 4.2a2 | No fix listed |
| zope | = 2.12.0 | No fix listed |
| zope | = 2.12.0-a1 | No fix listed |
| zope | = 2.12.0-a2 | No fix listed |
| zope | = 2.12.0-a3 | No fix listed |
| zope | = 2.12.0-a4 | No fix listed |
| zope | = 2.12.0-b1 | No fix listed |
| zope | = 2.12.0-b2 | No fix listed |
| zope | = 2.12.0-b3 | No fix listed |
| zope | = 2.12.0-b4 | No fix listed |
| zope | = 2.12.1 | No fix listed |
| zope | = 2.12.2 | No fix listed |
| zope | = 2.12.3 | No fix listed |
| zope | = 2.12.4 | No fix listed |
| zope | = 2.12.5 | No fix listed |
| zope | = 2.12.6 | No fix listed |
| zope | = 2.12.7 | No fix listed |
| zope | = 2.12.8 | No fix listed |
| zope | = 2.12.9 | No fix listed |
| zope | = 2.12.10 | No fix listed |
| zope | = 2.12.11 | No fix listed |
| zope | = 2.12.12 | No fix listed |
| zope | = 2.12.13 | No fix listed |
| zope | = 2.12.14 | No fix listed |
| zope | = 2.12.15 | No fix listed |
| zope | = 2.12.16 | No fix listed |
| zope | = 2.12.17 | No fix listed |
| zope | = 2.12.18 | No fix listed |
| zope | = 2.12.19 | No fix listed |
| zope | = 2.12.20 | No fix listed |
| zope | = 2.13.0 | No fix listed |
| zope | = 2.13.0-a1 | No fix listed |
| zope | = 2.13.0-a2 | No fix listed |
| zope | = 2.13.0-a3 | No fix listed |
| zope | = 2.13.0-a4 | No fix listed |
| zope | = 2.13.0-b1 | No fix listed |
| zope | = 2.13.0-c1 | No fix listed |
| zope | = 2.13.1 | No fix listed |
| zope | = 2.13.2 | No fix listed |
| zope | = 2.13.3 | No fix listed |
| zope | = 2.13.4 | No fix listed |
| zope | = 2.13.5 | No fix listed |
| zope | = 2.13.6 | No fix listed |
| zope | = 2.13.7 | No fix listed |
| zope | = 2.13.8 | No fix listed |
| zope | = 2.13.9 | No fix listed |
| zope | = 2.13.10 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- github.com patch
- bugzilla.redhat.com patch
- github.com
- github.com product
- web.archive.org
- plone.org patch
- plone.org patch
- plone.org patch vendor-advisory
- pypi.python.org patch
- zope2.zope.org patch
- pypi.org product
- github.com vendor-advisory
- 46221 third-party-advisory vendor-advisory
- 46323 third-party-advisory