CVE ID:	CVE-2007-5741
Description:	Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.
Test IDs:	1.3.6.1.4.1.25623.1.0.60071   1.3.6.1.4.1.25623.1.0.58737   1.3.6.1.4.1.25623.1.0.58764   1.3.6.1.4.1.25623.1.0.58739
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2007-5741 BugTraq ID: 26354 http://www.securityfocus.com/bid/26354 Bugtraq: 20071106 [CVE-2007-5741] Plone: statusmessages and linkintegrity unsafe network data hotfix (Google Search) http://www.securityfocus.com/archive/1/483343/100/0/threaded Debian Security Information: DSA-1405 (Google Search) http://www.debian.org/security/2007/dsa-1405 http://osvdb.org/42071 http://osvdb.org/42072 http://secunia.com/advisories/27530 http://secunia.com/advisories/27559 http://www.vupen.com/english/advisories/2007/3754 XForce ISS Database: plone-pythoncode-execution(38288) https://exchange.xforce.ibmcloud.com/vulnerabilities/38288