Vulnerabilities > CVE-2010-3198 - Denial Of Service vulnerability in Zope

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

PARTIAL

network

zope

NVD

Published: 2010-09-08

Updated: 2010-09-10

Summary

ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions.

Vulnerable Configurations

Part	Description	Count
Application	Zope Zope Zope 2.10.0-B1 Zope Zope 2.10.0-B2 Zope Zope 2.10.0-C1 Zope Zope 2.10.0-Final Zope Zope 2.10.2 Zope Zope 2.10.2-B1 Zope Zope 2.10.2-Final Zope Zope 2.10.3 Zope Zope 2.10.3-Final Zope Zope 2.10.4-Final Zope Zope 2.10.5 Zope Zope 2.10.6 Zope Zope 2.10.7 Zope Zope 2.10.8 Zope Zope 2.10.9 Zope Zope 2.10.10 Zope Zope 2.10.11 Zope Zope 2.11.0 Zope Zope 2.11.0A1 Zope Zope 2.11.0B1 Zope Zope 2.11.0C1 Zope Zope 2.11.1 Zope Zope 2.11.2 Zope Zope 2.11.3 Zope Zope 2.11.4 Zope Zope 2.11.5 Zope Zope 2.11.6	27

Summary

Vulnerable Configurations

References