CVE-2010-3198

ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://www.securityfocus.com/bid/42939
http://www.vupen.com/english/advisories/2010/2275	Vendor Advisory
http://www.zope.org/Products/Zope/2.10.12/CHANGES.txt
http://www.zope.org/Products/Zope/2.11.7/CHANGES.txt
https://bugs.launchpad.net/zope2/+bug/627988	Exploit Patch Vendor Advisory
https://mail.zope.org/pipermail/zope-announce/2010-September/002247.html	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:zope:zope:2.10.0-b1:::::::*
	cpe:2.3:a:zope:zope:2.10.0-b2:::::::*
	cpe:2.3:a:zope:zope:2.10.0-c1:::::::*
	cpe:2.3:a:zope:zope:2.10.0-final:::::::*
	cpe:2.3:a:zope:zope:2.10.2:::::::*
	cpe:2.3:a:zope:zope:2.10.2-b1:::::::*
	cpe:2.3:a:zope:zope:2.10.2-final:::::::*
	cpe:2.3:a:zope:zope:2.10.3:::::::*
	cpe:2.3:a:zope:zope:2.10.3-final:::::::*
	cpe:2.3:a:zope:zope:2.10.4-final:::::::*
	cpe:2.3:a:zope:zope:2.10.5:::::::*
	cpe:2.3:a:zope:zope:2.10.6:::::::*
	cpe:2.3:a:zope:zope:2.10.7:::::::*
	cpe:2.3:a:zope:zope:2.10.8:::::::*
	cpe:2.3:a:zope:zope:2.10.9:::::::*
	cpe:2.3:a:zope:zope:2.10.10:::::::*
	cpe:2.3:a:zope:zope:2.10.11:::::::*
	cpe:2.3:a:zope:zope:2.11.0:::::::*
	cpe:2.3:a:zope:zope:2.11.0a1:::::::*
	cpe:2.3:a:zope:zope:2.11.0b1:::::::*
	cpe:2.3:a:zope:zope:2.11.0c1:::::::*
	cpe:2.3:a:zope:zope:2.11.1:::::::*
	cpe:2.3:a:zope:zope:2.11.2:::::::*
	cpe:2.3:a:zope:zope:2.11.3:::::::*
	cpe:2.3:a:zope:zope:2.11.4:::::::*
	cpe:2.3:a:zope:zope:2.11.5:::::::*
	cpe:2.3:a:zope:zope:2.11.6:::::::*

History

No history.

Information

Published : 2010-09-08 20:00

Updated : 2024-02-28 11:41

NVD link : CVE-2010-3198

Mitre link : CVE-2010-3198

CVE.ORG link : CVE-2010-3198

JSON object : View

Products Affected

zope

zope

CWE

NVD-CWE-Other

{"id": "CVE-2010-3198", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-09-08T20:00:04.573", "references": [{"url": "http://www.securityfocus.com/bid/42939", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2010/2275", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.zope.org/Products/Zope/2.10.12/CHANGES.txt", "source": "cve@mitre.org"}, {"url": "http://www.zope.org/Products/Zope/2.11.7/CHANGES.txt", "source": "cve@mitre.org"}, {"url": "https://bugs.launchpad.net/zope2/+bug/627988", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://mail.zope.org/pipermail/zope-announce/2010-September/002247.html", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions."}, {"lang": "es", "value": "ZServer de Zope v2.10.x anterior a v2.10.12 y v2.11x anterior a v2.11.7 permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda de los procesos activos) a trav\u00e9s de vectores que provoquen excepciones no controladas."}], "lastModified": "2010-09-10T04:00:00.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zope:zope:2.10.0-b1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A41D4E4B-EFEF-46E8-99E5-BA1B691F0673"}, {"criteria": "cpe:2.3:a:zope:zope:2.10.0-b2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B1685B1-4E40-4341-A4FD-54409EF5160A"}, {"criteria": "cpe:2.3:a:zope:zope:2.10.0-c1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7490F597-C4C5-4CF1-8090-08FB3B1A8ECE"}, {"criteria": "cpe:2.3:a:zope:zope:2.10.0-final:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "43997ED2-9214-42D9-8404-23BC5B79139E"}, {"criteria": "cpe:2.3:a:zope:zope:2.10.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "364BF6B5-3C83-41D3-A934-40BD0C4D05ED"}, {"criteria": "cpe:2.3:a:zope:zope:2.10.2-b1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AE608607-2800-4B9F-814B-3E339E2F86A1"}, {"criteria": "cpe:2.3:a:zope:zope:2.10.2-final:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB02DAA0-3E51-4419-82FB-1DAF9C8105B8"}, {"criteria": "cpe:2.3:a:zope:zope:2.10.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0A85B5F4-C731-45F7-801F-8399B06EE135"}, {"criteria": "cpe:2.3:a:zope:zope:2.10.3-final:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B6819AA8-E777-4C9A-9950-AD1F34C89B1D"}, {"criteria": "cpe:2.3:a:zope:zope:2.10.4-final:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F69CE0DC-A1C8-4E88-BA6E-3A152697D36F"}, {"criteria": "cpe:2.3:a:zope:zope:2.10.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "02F52B0A-A6F9-4357-9E54-69794FE6568E"}, {"criteria": "cpe:2.3:a:zope:zope:2.10.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B80D8374-50AD-4710-9B6E-C31B67B98C97"}, {"criteria": "cpe:2.3:a:zope:zope:2.10.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B85BDEE-B9B3-45E5-B1FC-F639B2351E1A"}, {"criteria": "cpe:2.3:a:zope:zope:2.10.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52629E94-50DC-4F00-8F96-217F4F2B82B3"}, {"criteria": "cpe:2.3:a:zope:zope:2.10.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CB5C2E63-04C5-4F91-8649-0C7F0E9B4D63"}, {"criteria": "cpe:2.3:a:zope:zope:2.10.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2758FAA-DA98-468D-A116-EA2F89F6EBFF"}, {"criteria": "cpe:2.3:a:zope:zope:2.10.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8B4322F9-96DC-4907-A091-DC63B02DCEB8"}, {"criteria": "cpe:2.3:a:zope:zope:2.11.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "92CC66BD-4B63-4CA5-9F4E-A5F1FC6A86DC"}, {"criteria": "cpe:2.3:a:zope:zope:2.11.0a1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "609A682A-9233-40FE-BF48-EB8645A98182"}, {"criteria": "cpe:2.3:a:zope:zope:2.11.0b1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8816B911-9FA2-41C9-BAF4-4ED902EAB518"}, {"criteria": "cpe:2.3:a:zope:zope:2.11.0c1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BF76AB3F-8AC4-4176-9126-48E929911C6D"}, {"criteria": "cpe:2.3:a:zope:zope:2.11.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "68155E38-F337-42CE-AE30-9482EBED8EA6"}, {"criteria": "cpe:2.3:a:zope:zope:2.11.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E7994032-FEBB-4FD3-9808-A7B277CAD8A7"}, {"criteria": "cpe:2.3:a:zope:zope:2.11.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C675DA8E-D981-4CFE-8EF7-04FD187DC5CB"}, {"criteria": "cpe:2.3:a:zope:zope:2.11.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B740CAB6-4459-4934-9731-954BF6DAC019"}, {"criteria": "cpe:2.3:a:zope:zope:2.11.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9A8AEA03-622E-415C-972B-5733110B6396"}, {"criteria": "cpe:2.3:a:zope:zope:2.11.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A9D6ADED-7B4D-4E4F-8EDE-8D933B9861A7"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}