Main Vulnerability Database Vulnerabilities #VU111191

Input validation error in Zope - CVE-2002-0687

Published: September 5, 2008 / Updated: June 17, 2025

Vulnerability identifier: #VU111191

CSH Severity: Medium

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green

CVE-ID: CVE-2002-0687

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vendor: Zope

Affected software:
Zope

Detailed vulnerability description

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

The "through the web code" capability for Zope 2.0 through 2.5.1 b1 allows untrusted users to shut down the Zope server via certain headers.

Install update from vendor's website.