NetSight
IP …
critical9.3Public exploit code

CVE-2011-3587

Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbit…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p_ class in OFS/misc_.py and the use of Python modules.

Affected products

VendorProductAffected versions
PlonePlone
Versions 4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5
ZopeZope
Versions 2.12.0, 2.12.1, 2.12.2, 2.12.3, 2.12.4, 2.12.5

References