CVE-2008-5102
N/A
Published: November 17, 2008 at 06:00 PM UTC
Updated: June 16, 2026 at 10:59 PM UTC
1 product affected across 1 vendorZope
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 4%
Description
PythonScripts in Zope 2 2.11.2 and earlier, as used in Conga and other products, allows remote authenticated users to cause a denial of service (resource consumption or application halt) via certain (1) raise or (2) import statements.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 2.11.21.10.31.10.42.0.02.0.0a42.0.0b42.0.0b52.0.0b62.0.12.1.02.1.0b12.1.0b22.1.12.1.22.1.32.1.42.1.52.1.62.10.0-b12.10.0-b22.10.0-c12.10.0-final2.10.2-b12.10.2-final2.10.3-final2.10.4-final2.10.52.10.62.10.72.11.02.11.12.2.02.2.0a12.2.0b12.2.0b22.2.0b32.2.0b42.2.12.2.1b12.2.22.2.32.2.42.2.4b12.2.52.2.5b12.3.02.3.0a12.3.0a22.3.0b12.3.0b22.3.0b32.3.12.3.1b12.3.1b22.3.1b32.3.22.3.2b12.3.2b22.3.32.3.3b12.4.02.4.0a12.4.0b12.4.0b22.4.0b32.4.12.4.1b12.4.22.4.2b12.4.32.4.3 upgrade2.4.3b12.4.42.4.4 upgrade2.4.4b12.5.02.5.0a12.5.0a22.5.0b12.5.12.5.1 upgrade2.5.1b12.5.1b22.6.02.6.0a12.6.0b12.6.0b22.6.12.6.1 upgrade2.6.1.b12.6.22.6.2.b12.6.2.b22.6.2.b32.6.2.b42.6.2.b52.6.2.b62.6.32.6.42.6.4 rc12.6.4 rc22.7.0-a12.7.0-b12.7.0-b22.7.0-b32.7.0-b42.7.0-c12.7.0-c22.7.0-final2.7.1-b12.7.1-b22.7.1-final2.7.2-c12.7.2-final2.7.3-b12.7.3-b22.7.3-final2.7.4-b12.7.4-b22.7.4-c12.7.4-c22.7.4-final2.7.5-b12.7.5-c12.7.5-final2.7.6-b12.7.6-b22.7.6-final2.7.7-b12.7.7-final2.7.82.7.92.8.0-a12.8.0-a22.8.0-b12.8.0-b22.8.0-final2.8.1-b12.8.1-final2.8.102.8.22.8.32.8.42.8.52.8.62.8.72.8.82.8.92.8.9.12.9.0-b12.9.0-b22.9.0-final2.9.12.9.102.9.22.9.32.9.42.9.52.9.62.9.72.9.82.9.9
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (8)
Mailing Listx_refsource_MLIST
Source: [email protected]
http://mail.zope.org/pipermail/zope/2008-August/174025.htmlMailing Listx_refsource_MLIST
Source: [email protected]
http://openwall.com/lists/oss-security/2008/11/12/2VDB Entryx_refsource_VUPEN
Source: [email protected]
http://www.vupen.com/english/advisories/2008/2418x_refsource_CONFIRMPatch
Source: [email protected]
http://www.zope.org/Products/Zope/Hotfix-2008-08-12/Hotfix_20080812-1.1.0.tar.gzx_refsource_CONFIRMVendor Advisory
Source: [email protected]
http://www.zope.org/Products/Zope/Hotfix-2008-08-12/README.txtQuick Info
StatusMODIFIED
CWE
CWE-399
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card