Test ID:	1.3.6.1.4.1.25623.1.0.66062
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-848-1)
Summary:	The remote host is missing an update for the 'zope3' package(s) announced via the USN-848-1 advisory.
Description:	Summary: The remote host is missing an update for the 'zope3' package(s) announced via the USN-848-1 advisory. Vulnerability Insight: It was discovered that the Zope Object Database (ZODB) database server (ZEO) improperly filtered certain commands when a database is shared among multiple applications or application instances. A remote attacker could send malicious commands to the server and execute arbitrary code. (CVE-2009-0668) It was discovered that the Zope Object Database (ZODB) database server (ZEO) did not handle authentication properly when a database is shared among multiple applications or application instances. A remote attacker could use this flaw to bypass security restrictions. (CVE-2009-0669) It was discovered that Zope did not limit the number of new object ids a client could request. A remote attacker could use this flaw to consume a huge amount of resources, leading to a denial of service. (No CVE identifier) Affected Software/OS: 'zope3' package(s) on Ubuntu 6.06, Ubuntu 8.04, Ubuntu 8.10, Ubuntu 9.04. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0668 BugTraq ID: 35987 http://www.securityfocus.com/bid/35987 http://mail.zope.org/pipermail/zope-announce/2009-August/002220.html http://osvdb.org/56827 http://secunia.com/advisories/36204 http://secunia.com/advisories/36205 http://www.vupen.com/english/advisories/2009/2217 XForce ISS Database: zope-protocol-code-execution(52377) https://exchange.xforce.ibmcloud.com/vulnerabilities/52377 Common Vulnerability Exposure (CVE) ID: CVE-2009-0669 http://osvdb.org/56826 XForce ISS Database: zope-protocol-auth-bypass(52379) https://exchange.xforce.ibmcloud.com/vulnerabilities/52379
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.