Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2001-1227 (GCVE-0-2001-1227)
Vulnerability from cvelistv5 – Published: 2002-06-25 04:00 – Updated: 2024-08-08 04:51
VLAI
EPSS
Summary
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| http://www.linux-mandrake.com/en/security/2001/MD… | vendor-advisoryx_refsource_MANDRAKE |
| http://www.redhat.com/support/errata/RHSA-2001-115.html | vendor-advisoryx_refsource_REDHAT |
| http://www.securityfocus.com/bid/3425 | vdb-entryx_refsource_BID |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.redhat.com/support/errata/RHSA-2001-072.html | vendor-advisoryx_refsource_REDHAT |
Date Public
2001-10-10 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T04:51:07.131Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "MDKSA-2001:080",
"tags": [
"vendor-advisory",
"x_refsource_MANDRAKE",
"x_transferred"
],
"url": "http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-080.php3"
},
{
"name": "RHSA-2001:115",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2001-115.html"
},
{
"name": "3425",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/3425"
},
{
"name": "zope-fmt-access-methods(7271)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7271"
},
{
"name": "RHSA-2001:072",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2001-072.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2001-10-10T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2002-06-16T00:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "MDKSA-2001:080",
"tags": [
"vendor-advisory",
"x_refsource_MANDRAKE"
],
"url": "http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-080.php3"
},
{
"name": "RHSA-2001:115",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2001-115.html"
},
{
"name": "3425",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/3425"
},
{
"name": "zope-fmt-access-methods(7271)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7271"
},
{
"name": "RHSA-2001:072",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2001-072.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2001-1227",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "MDKSA-2001:080",
"refsource": "MANDRAKE",
"url": "http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-080.php3"
},
{
"name": "RHSA-2001:115",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2001-115.html"
},
{
"name": "3425",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/3425"
},
{
"name": "zope-fmt-access-methods(7271)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7271"
},
{
"name": "RHSA-2001:072",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2001-072.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2001-1227",
"datePublished": "2002-06-25T04:00:00.000Z",
"dateReserved": "2002-04-11T00:00:00.000Z",
"dateUpdated": "2024-08-08T04:51:07.131Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2001-1227",
"date": "2026-06-24",
"epss": "0.01419",
"percentile": "0.69367"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:zope:zope:2.2.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CF3C0DAC-01B0-4C9D-9AA2-8F02F974DCFF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:zope:zope:2.2.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"12A13ABF-9850-4AB8-A0C9-8D6B9F3D9862\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:zope:zope:2.2.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"15B80335-5F59-4530-A241-437367369BD8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:zope:zope:2.2.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"53427D40-495B-4F37-95A5-6D069186CBB5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:zope:zope:2.2.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1DB2FC39-A95D-414E-A67E-66AF79A12CEB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:zope:zope:2.2.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"925BC42D-02B5-4B6F-ADC6-156407868276\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.\"}]",
"id": "CVE-2001-1227",
"lastModified": "2024-11-20T23:37:11.820",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:P/I:P/A:P\", \"baseScore\": 7.5, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": true, \"userInteractionRequired\": false}]}",
"published": "2001-10-10T04:00:00.000",
"references": "[{\"url\": \"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-080.php3\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\"]}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2001-072.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2001-115.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\"]}, {\"url\": \"http://www.securityfocus.com/bid/3425\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/7271\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-080.php3\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2001-072.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2001-115.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"http://www.securityfocus.com/bid/3425\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/7271\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-Other\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2001-1227\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2001-10-10T04:00:00.000\",\"lastModified\":\"2026-04-16T00:27:16.627\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":true,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:zope:zope:2.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CF3C0DAC-01B0-4C9D-9AA2-8F02F974DCFF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:zope:zope:2.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"12A13ABF-9850-4AB8-A0C9-8D6B9F3D9862\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:zope:zope:2.2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"15B80335-5F59-4530-A241-437367369BD8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:zope:zope:2.2.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"53427D40-495B-4F37-95A5-6D069186CBB5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:zope:zope:2.2.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1DB2FC39-A95D-414E-A67E-66AF79A12CEB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:zope:zope:2.2.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"925BC42D-02B5-4B6F-ADC6-156407868276\"}]}]}],\"references\":[{\"url\":\"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-080.php3\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2001-072.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2001-115.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.securityfocus.com/bid/3425\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/7271\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-080.php3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2001-072.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2001-115.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.securityfocus.com/bid/3425\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/7271\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
FKIE_CVE-2001-1227
Vulnerability from fkie_nvd - Published: 2001-10-10 04:00 - Updated: 2026-06-16 21:55
Severity
Summary
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.
References
{
"affected": [
{
"affectedData": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"source": "cve@mitre.org"
}
],
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:zope:zope:2.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "CF3C0DAC-01B0-4C9D-9AA2-8F02F974DCFF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zope:zope:2.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "12A13ABF-9850-4AB8-A0C9-8D6B9F3D9862",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zope:zope:2.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "15B80335-5F59-4530-A241-437367369BD8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zope:zope:2.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "53427D40-495B-4F37-95A5-6D069186CBB5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zope:zope:2.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "1DB2FC39-A95D-414E-A67E-66AF79A12CEB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:zope:zope:2.2.5:*:*:*:*:*:*:*",
"matchCriteriaId": "925BC42D-02B5-4B6F-ADC6-156407868276",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags."
}
],
"id": "CVE-2001-1227",
"lastModified": "2026-06-16T21:55:51.040",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": true,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2001-10-10T04:00:00.000",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Patch"
],
"url": "http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-080.php3"
},
{
"source": "cve@mitre.org",
"url": "http://www.redhat.com/support/errata/RHSA-2001-072.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch"
],
"url": "http://www.redhat.com/support/errata/RHSA-2001-115.html"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/3425"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7271"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-080.php3"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.redhat.com/support/errata/RHSA-2001-072.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "http://www.redhat.com/support/errata/RHSA-2001-115.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/3425"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7271"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-FP27-Q2R7-F723
Vulnerability from github – Published: 2022-04-30 18:17 – Updated: 2022-04-30 18:17
VLAI
Details
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.
{
"affected": [],
"aliases": [
"CVE-2001-1227"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2001-10-10T04:00:00Z",
"severity": "HIGH"
},
"details": "Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.",
"id": "GHSA-fp27-q2r7-f723",
"modified": "2022-04-30T18:17:35Z",
"published": "2022-04-30T18:17:35Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2001-1227"
},
{
"type": "WEB",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7271"
},
{
"type": "WEB",
"url": "http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-080.php3"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2001-072.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2001-115.html"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/3425"
}
],
"schema_version": "1.4.0",
"severity": []
}
GSD-2001-1227
Vulnerability from gsd - Updated: 2023-12-13 01:19Details
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2001-1227",
"description": "Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.",
"id": "GSD-2001-1227",
"references": [
"https://access.redhat.com/errata/RHSA-2001:115",
"https://access.redhat.com/errata/RHSA-2001:072"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2001-1227"
],
"details": "Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.",
"id": "GSD-2001-1227",
"modified": "2023-12-13T01:19:02.540584Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2001-1227",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "MDKSA-2001:080",
"refsource": "MANDRAKE",
"url": "http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-080.php3"
},
{
"name": "RHSA-2001:115",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2001-115.html"
},
{
"name": "3425",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/3425"
},
{
"name": "zope-fmt-access-methods(7271)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7271"
},
{
"name": "RHSA-2001:072",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2001-072.html"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:zope:zope:2.2.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:zope:zope:2.2.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:zope:zope:2.2.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:zope:zope:2.2.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:zope:zope:2.2.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:zope:zope:2.2.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2001-1227"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "RHSA-2001:115",
"refsource": "REDHAT",
"tags": [
"Patch"
],
"url": "http://www.redhat.com/support/errata/RHSA-2001-115.html"
},
{
"name": "MDKSA-2001:080",
"refsource": "MANDRAKE",
"tags": [
"Patch"
],
"url": "http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-080.php3"
},
{
"name": "RHSA-2001:072",
"refsource": "REDHAT",
"tags": [],
"url": "http://www.redhat.com/support/errata/RHSA-2001-072.html"
},
{
"name": "3425",
"refsource": "BID",
"tags": [],
"url": "http://www.securityfocus.com/bid/3425"
},
{
"name": "zope-fmt-access-methods(7271)",
"refsource": "XF",
"tags": [],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7271"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": true,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2017-10-10T01:30Z",
"publishedDate": "2001-10-10T04:00Z"
}
}
}
RHSA-2001:072
Vulnerability from csaf_redhat - Published: 2001-09-18 08:22 - Updated: 2026-01-13 22:11Summary
Red Hat Security Advisory: : Updated man package fixing GID security problems.
Severity
Important
Notes
Topic: Updated man packages fixing a local GID man exploit and a
potential GID man to root exploit, as well as a problem with the
man paths of Red Hat Linux 5.x and 6.x.
Details: Users could gain access to the GID man by overrunning a buffer in the
ultimate_source() function.
Users with GID man could get root access by creating man pages with
filenames containing escape characters.
Furthermore, the previous errata package hardcoded Red Hat Linux 7.x man
paths even on Red Hat Linux 5.x and 6.x.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Buffer overflow in ultimate_source function of man 1.5 and earlier allows local users to gain privileges.
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Linux 5.2
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:5.2
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 6.2
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:6.2
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 7.0
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:7.0
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 7.1
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:7.1
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Linux 5.2
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:5.2
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 6.2
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:6.2
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 7.0
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:7.0
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 7.1
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:7.1
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
21 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated man packages fixing a local GID man exploit and a \npotential GID man to root exploit, as well as a problem with the \nman paths of Red Hat Linux 5.x and 6.x.",
"title": "Topic"
},
{
"category": "general",
"text": "Users could gain access to the GID man by overrunning a buffer in the \nultimate_source() function.\n\nUsers with GID man could get root access by creating man pages with \nfilenames containing escape characters.\n\nFurthermore, the previous errata package hardcoded Red Hat Linux 7.x man \npaths even on Red Hat Linux 5.x and 6.x.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2001:072",
"url": "https://access.redhat.com/errata/RHSA-2001:072"
},
{
"category": "external",
"summary": "42031",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=42031"
},
{
"category": "external",
"summary": "42192",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=42192"
},
{
"category": "external",
"summary": "42450",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=42450"
},
{
"category": "external",
"summary": "42915",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=42915"
},
{
"category": "external",
"summary": "43134",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=43134"
},
{
"category": "external",
"summary": "43318",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=43318"
},
{
"category": "external",
"summary": "45646",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=45646"
},
{
"category": "external",
"summary": "45827",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=45827"
},
{
"category": "external",
"summary": "46405",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=46405"
},
{
"category": "external",
"summary": "47784",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=47784"
},
{
"category": "external",
"summary": "48762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=48762"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2001/rhsa-2001_072.json"
}
],
"title": "Red Hat Security Advisory: : Updated man package fixing GID security problems.",
"tracking": {
"current_release_date": "2026-01-13T22:11:48+00:00",
"generator": {
"date": "2026-01-13T22:11:48+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.15"
}
},
"id": "RHSA-2001:072",
"initial_release_date": "2001-09-18T08:22:00+00:00",
"revision_history": [
{
"date": "2001-09-18T08:22:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2001-05-28T00:00:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-01-13T22:11:48+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Linux 5.2",
"product": {
"name": "Red Hat Linux 5.2",
"product_id": "Red Hat Linux 5.2",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:5.2"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 6.2",
"product": {
"name": "Red Hat Linux 6.2",
"product_id": "Red Hat Linux 6.2",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:6.2"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 7.0",
"product": {
"name": "Red Hat Linux 7.0",
"product_id": "Red Hat Linux 7.0",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:7.0"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 7.1",
"product": {
"name": "Red Hat Linux 7.1",
"product_id": "Red Hat Linux 7.1",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:7.1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Linux"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2001-1028",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1616643"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in ultimate_source function of man 1.5 and earlier allows local users to gain privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Linux 5.2",
"Red Hat Linux 6.2",
"Red Hat Linux 7.0",
"Red Hat Linux 7.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2001-1028"
},
{
"category": "external",
"summary": "RHBZ#1616643",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1616643"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2001-1028",
"url": "https://www.cve.org/CVERecord?id=CVE-2001-1028"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2001-1028",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2001-1028"
}
],
"release_date": "2001-09-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2001-09-18T08:22:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. Only those\nRPMs which are currently installed will be updated. Those RPMs which are\nnot installed but included in the list will not be updated. Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains\nthe\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"Red Hat Linux 5.2",
"Red Hat Linux 6.2",
"Red Hat Linux 7.0",
"Red Hat Linux 7.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2001:072"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "security flaw"
},
{
"cve": "CVE-2001-1227",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1616651"
}
],
"notes": [
{
"category": "description",
"text": "Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Linux 5.2",
"Red Hat Linux 6.2",
"Red Hat Linux 7.0",
"Red Hat Linux 7.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2001-1227"
},
{
"category": "external",
"summary": "RHBZ#1616651",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1616651"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2001-1227",
"url": "https://www.cve.org/CVERecord?id=CVE-2001-1227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2001-1227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2001-1227"
}
],
"release_date": "2001-10-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2001-09-18T08:22:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. Only those\nRPMs which are currently installed will be updated. Those RPMs which are\nnot installed but included in the list will not be updated. Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains\nthe\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"Red Hat Linux 5.2",
"Red Hat Linux 6.2",
"Red Hat Linux 7.0",
"Red Hat Linux 7.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2001:072"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "security flaw"
}
]
}
RHSA-2001:115
Vulnerability from csaf_redhat - Published: 2001-10-10 22:16 - Updated: 2025-11-21 17:24Summary
Red Hat Security Advisory: : New Zope packages are available
Severity
Moderate
Notes
Topic: New Zope packages are available which fix a security flaw with DTML
scripting.
Details: The updated packages include a "hotfix" product which addresses a security
problem with DTML scripting, as described in the Hotfix_2001-09-28
README.txt file: "The issue involves the fmt attribute of dtml-var tags.
Without this correction, Zope does not check security access to methods
invoked through fmt. This issue could allow partially trusted users with
enough knowledge of Zope to call, in a limited way, methods they would not
otherwise be allowed to access."
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Powertools 6.2
Red Hat / Red Hat Powertools
|
cpe:/a:redhat:powertools:6.2
|
— |
Vendor Fix
fix
|
|
Red Hat Powertools 7.0
Red Hat / Red Hat Powertools
|
cpe:/a:redhat:powertools:7.0
|
— |
Vendor Fix
fix
|
|
Red Hat Powertools 7.1
Red Hat / Red Hat Powertools
|
cpe:/a:redhat:powertools:7.1
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
8 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "New Zope packages are available which fix a security flaw with DTML\nscripting.",
"title": "Topic"
},
{
"category": "general",
"text": "The updated packages include a \"hotfix\" product which addresses a security\nproblem with DTML scripting, as described in the Hotfix_2001-09-28\nREADME.txt file: \"The issue involves the fmt attribute of dtml-var tags.\nWithout this correction, Zope does not check security access to methods\ninvoked through fmt. This issue could allow partially trusted users with\nenough knowledge of Zope to call, in a limited way, methods they would not\notherwise be allowed to access.\"",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2001:115",
"url": "https://access.redhat.com/errata/RHSA-2001:115"
},
{
"category": "external",
"summary": "http://www.zope.org/Products/Zope/Hotfix_2001-09-28/README.txt",
"url": "http://www.zope.org/Products/Zope/Hotfix_2001-09-28/README.txt"
},
{
"category": "external",
"summary": "http://lwn.net/daily/zope-dtml-fmt.php3",
"url": "http://lwn.net/daily/zope-dtml-fmt.php3"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2001/rhsa-2001_115.json"
}
],
"title": "Red Hat Security Advisory: : New Zope packages are available",
"tracking": {
"current_release_date": "2025-11-21T17:24:42+00:00",
"generator": {
"date": "2025-11-21T17:24:42+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2001:115",
"initial_release_date": "2001-10-10T22:16:00+00:00",
"revision_history": [
{
"date": "2001-10-10T22:16:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2001-10-02T00:00:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:24:42+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Powertools 6.2",
"product": {
"name": "Red Hat Powertools 6.2",
"product_id": "Red Hat Powertools 6.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:powertools:6.2"
}
}
},
{
"category": "product_name",
"name": "Red Hat Powertools 7.0",
"product": {
"name": "Red Hat Powertools 7.0",
"product_id": "Red Hat Powertools 7.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:powertools:7.0"
}
}
},
{
"category": "product_name",
"name": "Red Hat Powertools 7.1",
"product": {
"name": "Red Hat Powertools 7.1",
"product_id": "Red Hat Powertools 7.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:powertools:7.1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Powertools"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2001-1227",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1616651"
}
],
"notes": [
{
"category": "description",
"text": "Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Powertools 6.2",
"Red Hat Powertools 7.0",
"Red Hat Powertools 7.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2001-1227"
},
{
"category": "external",
"summary": "RHBZ#1616651",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1616651"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2001-1227",
"url": "https://www.cve.org/CVERecord?id=CVE-2001-1227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2001-1227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2001-1227"
}
],
"release_date": "2001-10-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2001-10-10T22:16:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. Only those\nRPMs which are currently installed will be updated. Those RPMs which are\nnot installed but included in the list will not be updated. Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains\nthe desired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this to be an easier way to apply updates. To use Red Hat\nNetwork, launch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.\n\nAfter you have updated the packages, you must restart zope:\n\n /etc/rc.d/init.d/zope restart",
"product_ids": [
"Red Hat Powertools 6.2",
"Red Hat Powertools 7.0",
"Red Hat Powertools 7.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2001:115"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "security flaw"
}
]
}
RHSA-2001_072
Vulnerability from csaf_redhat - Published: 2001-09-18 08:22 - Updated: 2024-11-21 22:06Summary
Red Hat Security Advisory: : Updated man package fixing GID security problems.
Severity
Important
Notes
Topic: Updated man packages fixing a local GID man exploit and a
potential GID man to root exploit, as well as a problem with the
man paths of Red Hat Linux 5.x and 6.x.
Details: Users could gain access to the GID man by overrunning a buffer in the
ultimate_source() function.
Users with GID man could get root access by creating man pages with
filenames containing escape characters.
Furthermore, the previous errata package hardcoded Red Hat Linux 7.x man
paths even on Red Hat Linux 5.x and 6.x.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Buffer overflow in ultimate_source function of man 1.5 and earlier allows local users to gain privileges.
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Linux 5.2
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:5.2
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 6.2
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:6.2
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 7.0
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:7.0
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 7.1
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:7.1
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Linux 5.2
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:5.2
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 6.2
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:6.2
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 7.0
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:7.0
|
— |
Vendor Fix
fix
|
|
Red Hat Linux 7.1
Red Hat / Red Hat Linux
|
cpe:/o:redhat:linux:7.1
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
21 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated man packages fixing a local GID man exploit and a \npotential GID man to root exploit, as well as a problem with the \nman paths of Red Hat Linux 5.x and 6.x.",
"title": "Topic"
},
{
"category": "general",
"text": "Users could gain access to the GID man by overrunning a buffer in the \nultimate_source() function.\n\nUsers with GID man could get root access by creating man pages with \nfilenames containing escape characters.\n\nFurthermore, the previous errata package hardcoded Red Hat Linux 7.x man \npaths even on Red Hat Linux 5.x and 6.x.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2001:072",
"url": "https://access.redhat.com/errata/RHSA-2001:072"
},
{
"category": "external",
"summary": "42031",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=42031"
},
{
"category": "external",
"summary": "42192",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=42192"
},
{
"category": "external",
"summary": "42450",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=42450"
},
{
"category": "external",
"summary": "42915",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=42915"
},
{
"category": "external",
"summary": "43134",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=43134"
},
{
"category": "external",
"summary": "43318",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=43318"
},
{
"category": "external",
"summary": "45646",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=45646"
},
{
"category": "external",
"summary": "45827",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=45827"
},
{
"category": "external",
"summary": "46405",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=46405"
},
{
"category": "external",
"summary": "47784",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=47784"
},
{
"category": "external",
"summary": "48762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=48762"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2001/rhsa-2001_072.json"
}
],
"title": "Red Hat Security Advisory: : Updated man package fixing GID security problems.",
"tracking": {
"current_release_date": "2024-11-21T22:06:19+00:00",
"generator": {
"date": "2024-11-21T22:06:19+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2001:072",
"initial_release_date": "2001-09-18T08:22:00+00:00",
"revision_history": [
{
"date": "2001-09-18T08:22:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2001-05-28T00:00:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-21T22:06:19+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Linux 5.2",
"product": {
"name": "Red Hat Linux 5.2",
"product_id": "Red Hat Linux 5.2",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:5.2"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 6.2",
"product": {
"name": "Red Hat Linux 6.2",
"product_id": "Red Hat Linux 6.2",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:6.2"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 7.0",
"product": {
"name": "Red Hat Linux 7.0",
"product_id": "Red Hat Linux 7.0",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:7.0"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux 7.1",
"product": {
"name": "Red Hat Linux 7.1",
"product_id": "Red Hat Linux 7.1",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:linux:7.1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Linux"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2001-1028",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1616643"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in ultimate_source function of man 1.5 and earlier allows local users to gain privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Linux 5.2",
"Red Hat Linux 6.2",
"Red Hat Linux 7.0",
"Red Hat Linux 7.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2001-1028"
},
{
"category": "external",
"summary": "RHBZ#1616643",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1616643"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2001-1028",
"url": "https://www.cve.org/CVERecord?id=CVE-2001-1028"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2001-1028",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2001-1028"
}
],
"release_date": "2001-09-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2001-09-18T08:22:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. Only those\nRPMs which are currently installed will be updated. Those RPMs which are\nnot installed but included in the list will not be updated. Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains\nthe\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"Red Hat Linux 5.2",
"Red Hat Linux 6.2",
"Red Hat Linux 7.0",
"Red Hat Linux 7.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2001:072"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "security flaw"
},
{
"cve": "CVE-2001-1227",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1616651"
}
],
"notes": [
{
"category": "description",
"text": "Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Linux 5.2",
"Red Hat Linux 6.2",
"Red Hat Linux 7.0",
"Red Hat Linux 7.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2001-1227"
},
{
"category": "external",
"summary": "RHBZ#1616651",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1616651"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2001-1227",
"url": "https://www.cve.org/CVERecord?id=CVE-2001-1227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2001-1227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2001-1227"
}
],
"release_date": "2001-10-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2001-09-18T08:22:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. Only those\nRPMs which are currently installed will be updated. Those RPMs which are\nnot installed but included in the list will not be updated. Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains\nthe\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this an easier way to apply updates. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
"product_ids": [
"Red Hat Linux 5.2",
"Red Hat Linux 6.2",
"Red Hat Linux 7.0",
"Red Hat Linux 7.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2001:072"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "security flaw"
}
]
}
RHSA-2001_115
Vulnerability from csaf_redhat - Published: 2001-10-10 22:16 - Updated: 2024-11-21 22:06Summary
Red Hat Security Advisory: : New Zope packages are available
Severity
Moderate
Notes
Topic: New Zope packages are available which fix a security flaw with DTML
scripting.
Details: The updated packages include a "hotfix" product which addresses a security
problem with DTML scripting, as described in the Hotfix_2001-09-28
README.txt file: "The issue involves the fmt attribute of dtml-var tags.
Without this correction, Zope does not check security access to methods
invoked through fmt. This issue could allow partially trusted users with
enough knowledge of Zope to call, in a limited way, methods they would not
otherwise be allowed to access."
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Powertools 6.2
Red Hat / Red Hat Powertools
|
cpe:/a:redhat:powertools:6.2
|
— |
Vendor Fix
fix
|
|
Red Hat Powertools 7.0
Red Hat / Red Hat Powertools
|
cpe:/a:redhat:powertools:7.0
|
— |
Vendor Fix
fix
|
|
Red Hat Powertools 7.1
Red Hat / Red Hat Powertools
|
cpe:/a:redhat:powertools:7.1
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
8 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "New Zope packages are available which fix a security flaw with DTML\nscripting.",
"title": "Topic"
},
{
"category": "general",
"text": "The updated packages include a \"hotfix\" product which addresses a security\nproblem with DTML scripting, as described in the Hotfix_2001-09-28\nREADME.txt file: \"The issue involves the fmt attribute of dtml-var tags.\nWithout this correction, Zope does not check security access to methods\ninvoked through fmt. This issue could allow partially trusted users with\nenough knowledge of Zope to call, in a limited way, methods they would not\notherwise be allowed to access.\"",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2001:115",
"url": "https://access.redhat.com/errata/RHSA-2001:115"
},
{
"category": "external",
"summary": "http://www.zope.org/Products/Zope/Hotfix_2001-09-28/README.txt",
"url": "http://www.zope.org/Products/Zope/Hotfix_2001-09-28/README.txt"
},
{
"category": "external",
"summary": "http://lwn.net/daily/zope-dtml-fmt.php3",
"url": "http://lwn.net/daily/zope-dtml-fmt.php3"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2001/rhsa-2001_115.json"
}
],
"title": "Red Hat Security Advisory: : New Zope packages are available",
"tracking": {
"current_release_date": "2024-11-21T22:06:23+00:00",
"generator": {
"date": "2024-11-21T22:06:23+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2001:115",
"initial_release_date": "2001-10-10T22:16:00+00:00",
"revision_history": [
{
"date": "2001-10-10T22:16:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2001-10-02T00:00:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-21T22:06:23+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Powertools 6.2",
"product": {
"name": "Red Hat Powertools 6.2",
"product_id": "Red Hat Powertools 6.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:powertools:6.2"
}
}
},
{
"category": "product_name",
"name": "Red Hat Powertools 7.0",
"product": {
"name": "Red Hat Powertools 7.0",
"product_id": "Red Hat Powertools 7.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:powertools:7.0"
}
}
},
{
"category": "product_name",
"name": "Red Hat Powertools 7.1",
"product": {
"name": "Red Hat Powertools 7.1",
"product_id": "Red Hat Powertools 7.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:powertools:7.1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Powertools"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2001-1227",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1616651"
}
],
"notes": [
{
"category": "description",
"text": "Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Powertools 6.2",
"Red Hat Powertools 7.0",
"Red Hat Powertools 7.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2001-1227"
},
{
"category": "external",
"summary": "RHBZ#1616651",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1616651"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2001-1227",
"url": "https://www.cve.org/CVERecord?id=CVE-2001-1227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2001-1227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2001-1227"
}
],
"release_date": "2001-10-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2001-10-10T22:16:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade. Only those\nRPMs which are currently installed will be updated. Those RPMs which are\nnot installed but included in the list will not be updated. Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains\nthe desired RPMs.\n\nPlease note that this update is also available via Red Hat Network. Many\npeople find this to be an easier way to apply updates. To use Red Hat\nNetwork, launch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.\n\nAfter you have updated the packages, you must restart zope:\n\n /etc/rc.d/init.d/zope restart",
"product_ids": [
"Red Hat Powertools 6.2",
"Red Hat Powertools 7.0",
"Red Hat Powertools 7.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2001:115"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "security flaw"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…