Family: Ubuntu Local Security Checks --> Category: infos
USN229-1 : zope2.8 vulnerability Vulnerability Scan
Vulnerability Scan Summary
Detailed Explanation for this Vulnerability Test
These remote packages are missing security patches :
Zope did not deactivate the file inclusion feature when exposing
RestructuredText functionalities to untrusted users. A remote user
with the privilege of editing Zope webpages with RestructuredText
could exploit this to expose arbitrary files that can be read with the
rights of the Zope server, or execute arbitrary Zope code.
Upgrade to :
- zope2.8-2.8.1-5ubuntu0.1 (Ubuntu 5.10)
- zope2.8-sandbox-2.8.1-5ubuntu0.1 (Ubuntu 5.10)
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.