header-logo
Suggest Exploit
vendor:
Zope
by:
SecurityFocus
7.5
CVSS
HIGH
Denial-of-Service
400
CWE
Product Name: Zope
Affected Version From: 2.7.2000
Affected Version To: 2.11.2002
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008

Zope Multiple Remote Denial-of-Service Vulnerabilities

Remote attackers can exploit this issue to cause the Zope server to halt or to consume excessive server resources, resulting in denial-of-service conditions.

Mitigation:

Upgrade to the latest version of Zope.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/32267/info

Zope is prone to multiple remote denial-of-service vulnerabilities.

Remote attackers can exploit this issue to cause the Zope server to halt or to consume excessive server resources, resulting in denial-of-service conditions.

These issues affect Zope 2.7.0 through 2.11.2. 

To halt the application:
raise SystemExit

To consume excessive resources:
return 'foo'.encode('test.testall')