Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-5102
HistoryNov 17, 2008 - 12:00 a.m.

CVE-2008-5102

2008-11-1700:00:00
ubuntu.com
ubuntu.com
11

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

EPSS

0.032

Percentile

91.3%

PythonScripts in Zope 2 2.11.2 and earlier, as used in Conga and other
products, allows remote authenticated users to cause a denial of service
(resource consumption or application halt) via certain (1) raise or (2)
import statements.

Notes

Author Note
mdeslaur There are no PythonScripts in Zope 3. Removing zope3 from this CVE.

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

EPSS

0.032

Percentile

91.3%

Related for UB:CVE-2008-5102