http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200006-063

Zope2.2和更早版本中DocumentTemplate包存在漏洞。远程攻击者利用此漏洞可以在无认证情况下修改DTMLDocuments或DTMLMethods。

来源:www.zope.org
链接:http://www.zope.org/Products/Zope/Hotfix_06_16_2000/security_alert
来源:BUGTRAQ
名称:20000615[[email protected]:[Zope]Zopesecurityalertand2.1.7update[*important*]]
链接:http://archives.neohapsis.com/archives/bugtraq/2000-06/0144.html
来源:XF
名称:zope-dtml-remote-modify
链接:http://xforce.iss.net/static/4716.php
来源:BUGTRAQ
名称:2000615ConectivaLinuxSecurityAnnouncement-ZOPE
链接:http://www.securityfocus.com/templates/archive.pike?list=1&msg;[email protected]
来源:BID
名称:1354
链接:http://www.securityfocus.com/bid/1354
来源:REDHAT
名称:RHSA-2000:038
链接:http://www.redhat.com/support/errata/RHSA-2000-038.html
来源:BUGTRAQ
名称:20000728MDKSA-2000:026Zopeupdate
链接:http://archives.neohapsis.com/archives/bugtraq/2000-07/0412.html
来源:FREEBSD
名称:FreeBSD-SA-00:38
链接:ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00%3A38.zope.asc