CVE-2000-1211

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2000-12-16 · updated 2026-09-23

Description

Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities.

Affected products

zopefoundation Zope: 2.2.0, 2.2.0a1, 2.2.0b1, 2.2.0b2, 2.2.0b3, 2.2.0b4 (+5)

References

http://www.iss.net/security_center/static/5824.php
http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-083.php3
http://www.osvdb.org/6282
http://www.redhat.com/support/errata/RHSA-2000-125.html
http://www.zope.org/Products/Zope/Hotfix_2000-12-08/security_alert
http://www.iss.net/security_center/static/5824.php
http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-083.php3
http://www.osvdb.org/6282
http://www.redhat.com/support/errata/RHSA-2000-125.html
http://www.zope.org/Products/Zope/Hotfix_2000-12-08/security_alert

Get alerted when CVE-2000-1211 or the next vulnerability affects your stack