FKIE_CVE-2000-1212

Vulnerability from fkie_nvd - Published: 2000-12-18 05:00 - Updated: 2026-09-23 10:10
Severity
Summary
Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects.
References
cve@mitre.orghttp://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000365
cve@mitre.orghttp://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:086
cve@mitre.orghttp://www.debian.org/security/2001/dsa-007
cve@mitre.orghttp://www.osvdb.org/6283
cve@mitre.orghttp://www.redhat.com/support/errata/RHSA-2000-135.html
cve@mitre.orghttp://www.zope.org/Products/Zope/Hotfix_2000-12-18/security_alertPatch, Vendor Advisory
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/5778
af854a3a-2127-422b-91ae-364da2661108http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000365
af854a3a-2127-422b-91ae-364da2661108http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:086
af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2001/dsa-007
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/6283
af854a3a-2127-422b-91ae-364da2661108http://www.redhat.com/support/errata/RHSA-2000-135.html
af854a3a-2127-422b-91ae-364da2661108http://www.zope.org/Products/Zope/Hotfix_2000-12-18/security_alertPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/5778
Impacted products
Vendor Product Version
zope zope 2.2.0
zope zope 2.2.0a1
zope zope 2.2.0b1
zope zope 2.2.0b2
zope zope 2.2.0b3
zope zope 2.2.0b4
zope zope 2.2.1
zope zope 2.2.1b1
zope zope 2.2.2
zope zope 2.2.3
zope zope 2.2.4
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:zope:zope:2.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "CF3C0DAC-01B0-4C9D-9AA2-8F02F974DCFF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:zope:zope:2.2.0a1:*:*:*:*:*:*:*",
              "matchCriteriaId": "6D4E13A0-7384-49E3-A848-8E864C340F79",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:zope:zope:2.2.0b1:*:*:*:*:*:*:*",
              "matchCriteriaId": "0EA5CE15-530A-400D-9FDF-7044CD8C6DDC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:zope:zope:2.2.0b2:*:*:*:*:*:*:*",
              "matchCriteriaId": "B7DC30CD-684E-4C53-833E-6EF2C8D1A3E3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:zope:zope:2.2.0b3:*:*:*:*:*:*:*",
              "matchCriteriaId": "DABDC050-BF8B-4F8C-9FCD-4B0D86E46D60",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:zope:zope:2.2.0b4:*:*:*:*:*:*:*",
              "matchCriteriaId": "C91E72CC-8AEA-49E5-BB7D-3C16E2E30A0D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:zope:zope:2.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "12A13ABF-9850-4AB8-A0C9-8D6B9F3D9862",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:zope:zope:2.2.1b1:*:*:*:*:*:*:*",
              "matchCriteriaId": "98EBD292-5FC6-4463-B085-A34D1DFDB0C3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:zope:zope:2.2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "15B80335-5F59-4530-A241-437367369BD8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:zope:zope:2.2.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "53427D40-495B-4F37-95A5-6D069186CBB5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:zope:zope:2.2.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "1DB2FC39-A95D-414E-A67E-66AF79A12CEB",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects."
    },
    {
      "lang": "es",
      "value": "Zope 2.2.0 hasta 2.2.4 no protege adecuadamente un m\u00e9todo de actualizaci\u00f3n de datos en objetos Image y File, lo que permite a los atacantes con privilegios de edici\u00f3n DTML modificar los datos sin procesar de estos objetos."
    }
  ],
  "id": "CVE-2000-1212",
  "lastModified": "2026-09-23T10:10:00.673",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2000-12-18T05:00:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000365"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:086"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2001/dsa-007"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/6283"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2000-135.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.zope.org/Products/Zope/Hotfix_2000-12-18/security_alert"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/5778"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000365"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:086"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2001/dsa-007"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/6283"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2000-135.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.zope.org/Products/Zope/Hotfix_2000-12-18/security_alert"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/5778"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.