Search for packages
| purl | pkg:pypi/zodb3@3.4.2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1yu8-hwwc-pyc8
Aliases: CVE-2009-0668 GHSA-4x83-5gw5-q346 PYSEC-2009-8 |
Unspecified vulnerability in Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to execute arbitrary Python code via vectors involving the ZEO network protocol. |
Affected by 2 other vulnerabilities. |
|
VCID-ebby-3w76-r7be
Aliases: CVE-2009-0669 GHSA-5432-c996-hvhj PYSEC-2009-9 |
Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol. |
Affected by 2 other vulnerabilities. |
|
VCID-qn4a-azp2-1qfs
Aliases: CVE-2010-3495 GHSA-j6m4-frxh-p4x8 PYSEC-2010-27 |
Race condition in ZEO/StorageServer.py in Zope Object Database (ZODB) before 3.10.0 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, a related issue to CVE-2010-3492. |
Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||