Deskripsi CVE

PythonScripts in Zope 2 2.11.2 and earlier, as used in Conga and other products, allows remote authenticated users to cause a denial of service (resource consumption or application halt) via certain (1) raise or (2) import statements.

Informasi CVE

Kelemahan Terkait

CWE-ID	Nama Kelemahan	Sumber
CWE-399	Category : Resource Management Errors Weaknesses in this category are related to improper management of system resources.

Metrik

Metrik	Skor	Tingkat keparahan	CVSS Vektor	Sumber
V2	4		AV:N/AC:L/Au:S/C:N/I:N/A:P	nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

EPSS First.org

Informasi eksploitasi

Exploit Database EDB-ID : 32581

Tanggal publikasi : 2008-11-11 23h00 +00:00
Penulis : Marc-Andre Lemburg
Terverifikasi EDB : Yes

Produk yang Disebutkan

Konfigurasi 0

Zope>>Zope >> Version Hingga (termasuk) 2.11.2

Zope>>Zope >> Version 1.10.3

Zope>>Zope >> Version 1.10.4

Zope>>Zope >> Version 2.0.0

Zope>>Zope >> Version 2.0.0a4

Zope>>Zope >> Version 2.0.0b4

Zope>>Zope >> Version 2.0.0b5

Zope>>Zope >> Version 2.0.0b6

Zope>>Zope >> Version 2.0.1

Zope>>Zope >> Version 2.1.0

Zope>>Zope >> Version 2.1.0b1

Zope>>Zope >> Version 2.1.0b2

Zope>>Zope >> Version 2.1.1

Zope>>Zope >> Version 2.1.2

Zope>>Zope >> Version 2.1.3

Zope>>Zope >> Version 2.1.4

Zope>>Zope >> Version 2.1.5

Zope>>Zope >> Version 2.1.6

Zope>>Zope >> Version 2.2.0

Zope>>Zope >> Version 2.2.0a1

Zope>>Zope >> Version 2.2.0b1

Zope>>Zope >> Version 2.2.0b2

Zope>>Zope >> Version 2.2.0b3

Zope>>Zope >> Version 2.2.0b4

Zope>>Zope >> Version 2.2.1

Zope>>Zope >> Version 2.2.1b1

Zope>>Zope >> Version 2.2.2

Zope>>Zope >> Version 2.2.3

Zope>>Zope >> Version 2.2.4

Zope>>Zope >> Version 2.2.4b1

Zope>>Zope >> Version 2.2.5

Zope>>Zope >> Version 2.2.5b1

Zope>>Zope >> Version 2.3.0

Zope>>Zope >> Version 2.3.0a1

Zope>>Zope >> Version 2.3.0a2

Zope>>Zope >> Version 2.3.0b1

Zope>>Zope >> Version 2.3.0b2

Zope>>Zope >> Version 2.3.0b3

Zope>>Zope >> Version 2.3.1

Zope>>Zope >> Version 2.3.1b1

Zope>>Zope >> Version 2.3.1b2

Zope>>Zope >> Version 2.3.1b3

Zope>>Zope >> Version 2.3.2

Zope>>Zope >> Version 2.3.2b1

Zope>>Zope >> Version 2.3.2b2

Zope>>Zope >> Version 2.3.3

Zope>>Zope >> Version 2.3.3b1

Zope>>Zope >> Version 2.4.0

Zope>>Zope >> Version 2.4.0a1

Zope>>Zope >> Version 2.4.0b1

Zope>>Zope >> Version 2.4.0b2

Zope>>Zope >> Version 2.4.0b3

Zope>>Zope >> Version 2.4.1

Zope>>Zope >> Version 2.4.1b1

Zope>>Zope >> Version 2.4.2

Zope>>Zope >> Version 2.4.2b1

Zope>>Zope >> Version 2.4.3

Zope>>Zope >> Version 2.4.3b1

Zope>>Zope >> Version 2.4.4

Zope>>Zope >> Version 2.4.4b1

Zope>>Zope >> Version 2.5.0

Zope>>Zope >> Version 2.5.0a1

Zope>>Zope >> Version 2.5.0a2

Zope>>Zope >> Version 2.5.0b1

Zope>>Zope >> Version 2.5.1

Zope>>Zope >> Version 2.5.1b1

Zope>>Zope >> Version 2.5.1b2

Zope>>Zope >> Version 2.6.0

Zope>>Zope >> Version 2.6.0a1

Zope>>Zope >> Version 2.6.0b1

Zope>>Zope >> Version 2.6.0b2

Zope>>Zope >> Version 2.6.1

Zope>>Zope >> Version 2.6.1.b1

Zope>>Zope >> Version 2.6.2

Zope>>Zope >> Version 2.6.2.b1

Zope>>Zope >> Version 2.6.2.b2

Zope>>Zope >> Version 2.6.2.b3

Zope>>Zope >> Version 2.6.2.b4

Zope>>Zope >> Version 2.6.2.b5

Zope>>Zope >> Version 2.6.2.b6

Zope>>Zope >> Version 2.6.3

Zope>>Zope >> Version 2.6.4

Zope>>Zope >> Version 2.7.0-a1

Zope>>Zope >> Version 2.7.0-b1

Zope>>Zope >> Version 2.7.0-b2

Zope>>Zope >> Version 2.7.0-b3

Zope>>Zope >> Version 2.7.0-b4

Zope>>Zope >> Version 2.7.0-c1

Zope>>Zope >> Version 2.7.0-c2

Zope>>Zope >> Version 2.7.0-final

Zope>>Zope >> Version 2.7.1-b1

Zope>>Zope >> Version 2.7.1-b2

Zope>>Zope >> Version 2.7.1-final

Zope>>Zope >> Version 2.7.2-c1

Zope>>Zope >> Version 2.7.2-final

Zope>>Zope >> Version 2.7.3-b1

Zope>>Zope >> Version 2.7.3-b2

Zope>>Zope >> Version 2.7.3-final

Zope>>Zope >> Version 2.7.4-b1

Zope>>Zope >> Version 2.7.4-b2

Zope>>Zope >> Version 2.7.4-c1

Zope>>Zope >> Version 2.7.4-c2

Zope>>Zope >> Version 2.7.4-final

Zope>>Zope >> Version 2.7.5-b1

Zope>>Zope >> Version 2.7.5-c1

Zope>>Zope >> Version 2.7.5-final

Zope>>Zope >> Version 2.7.6-b1

Zope>>Zope >> Version 2.7.6-b2

Zope>>Zope >> Version 2.7.6-final

Zope>>Zope >> Version 2.7.7-b1

Zope>>Zope >> Version 2.7.7-final

Zope>>Zope >> Version 2.7.8

Zope>>Zope >> Version 2.7.9

Zope>>Zope >> Version 2.8.0-a1

Zope>>Zope >> Version 2.8.0-a2

Zope>>Zope >> Version 2.8.0-b1

Zope>>Zope >> Version 2.8.0-b2

Zope>>Zope >> Version 2.8.0-final

Zope>>Zope >> Version 2.8.1-b1

Zope>>Zope >> Version 2.8.1-final

Zope>>Zope >> Version 2.8.2

Zope>>Zope >> Version 2.8.3

Zope>>Zope >> Version 2.8.4

Zope>>Zope >> Version 2.8.5

Zope>>Zope >> Version 2.8.6

Zope>>Zope >> Version 2.8.7

Zope>>Zope >> Version 2.8.8

Zope>>Zope >> Version 2.8.9

Zope>>Zope >> Version 2.8.9.1

Zope>>Zope >> Version 2.8.10

Zope>>Zope >> Version 2.9.0-b1

Zope>>Zope >> Version 2.9.0-b2

Zope>>Zope >> Version 2.9.0-final

Zope>>Zope >> Version 2.9.1

Zope>>Zope >> Version 2.9.2

Zope>>Zope >> Version 2.9.3

Zope>>Zope >> Version 2.9.4

Zope>>Zope >> Version 2.9.5

Zope>>Zope >> Version 2.9.6

Zope>>Zope >> Version 2.9.7

Zope>>Zope >> Version 2.9.8

Zope>>Zope >> Version 2.9.9

Zope>>Zope >> Version 2.9.10

Zope>>Zope >> Version 2.10.0-b1

Zope>>Zope >> Version 2.10.0-b2

Zope>>Zope >> Version 2.10.0-c1

Zope>>Zope >> Version 2.10.0-final

Zope>>Zope >> Version 2.10.2-b1

Zope>>Zope >> Version 2.10.2-final

Zope>>Zope >> Version 2.10.3-final

Zope>>Zope >> Version 2.10.4-final

Zope>>Zope >> Version 2.10.5

Zope>>Zope >> Version 2.10.6

Zope>>Zope >> Version 2.10.7

Zope>>Zope >> Version 2.11.0

Zope>>Zope >> Version 2.11.1

Referensi

http://mail.zope.org/pipermail/zope/2008-August/174025.html
Tags : mailing-list, x_refsource_MLIST

http://bugs.gentoo.org/show_bug.cgi?id=246411
Tags : x_refsource_CONFIRM

https://bugs.launchpad.net/zope2/+bug/257269
Tags : x_refsource_CONFIRM

http://www.zope.org/Products/Zope/Hotfix-2008-08-12/README.txt
Tags : x_refsource_CONFIRM

http://www.zope.org/Products/Zope/Hotfix-2008-08-12/Hotfix_20080812-1.1.0.tar.gz
Tags : x_refsource_CONFIRM

https://bugs.launchpad.net/zope2/+bug/257276
Tags : x_refsource_CONFIRM

http://www.vupen.com/english/advisories/2008/2418
Tags : vdb-entry, x_refsource_VUPEN

http://openwall.com/lists/oss-security/2008/11/12/2
Tags : mailing-list, x_refsource_MLIST

Tanggal	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	6.29%	–	–
2022-04-03	–	–	6.29%	–	–
2022-10-23	–	–	6.29%	–	–
2022-11-20	–	–	6.29%	–	–
2022-12-11	–	–	6.29%	–	–
2023-01-01	–	–	6.29%	–	–
2023-02-12	–	–	6.29%	–	–
2023-02-19	–	–	6.29%	–	–
2023-02-26	–	–	6.29%	–	–
2023-03-12	–	–	–	3.69%	–
2023-08-06	–	–	–	3.69%	–
2024-03-17	–	–	–	3.69%	–
2024-06-02	–	–	–	3.24%	–
2024-11-17	–	–	–	3.24%	–
2024-12-22	–	–	–	2.73%	–
2025-01-19	–	–	–	2.73%	–
2025-03-02	–	–	–	2.73%	–
2025-03-09	–	–	–	2.73%	–
2025-03-18	–	–	–	–	11.2%
2025-11-17	–	–	–	–	10.5%
2025-11-18	–	–	–	–	10.5%
2025-11-20	–	–	–	–	10.5%
2026-01-07	–	–	–	–	11.19%
2026-03-08	–	–	–	–	12.1%

Tanggal	Persentil
2022-02-06	78%
2022-04-03	9%
2022-10-23	91%
2022-11-20	9%
2022-12-11	91%
2023-01-01	9%
2023-02-12	91%
2023-02-19	9%
2023-02-26	91%
2023-03-12	9%
2023-08-06	91%
2024-03-17	92%
2024-06-02	91%
2024-11-17	92%
2024-12-22	9%
2025-01-19	9%
2025-03-02	91%
2025-03-09	91%
2025-03-18	93%
2025-11-17	93%
2025-11-18	92%
2025-11-20	93%
2026-01-07	93%
2026-03-08	94%

CVE-2008-5102 : Detail

CVE-2008-5102