What’s Vulnerable › Vulnerabilities

CVE-2001-0128

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2001-03-12 · updated 2026-06-16

Description

Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges.

Affected products

• Conectiva Linux: 4.2, 5.0, 5.1, 6.0
• Debian Linux: 2.2
• FreeBSD: 6.2-stable
• Mandrakesoft Mandrake Linux: 7.1, 7.2
• RedHat Linux: 6.1, 6.2, 7.0
• RedHat Linux Powertools: 6.1, 6.2, 7.0
• zopefoundation Zope: through 2.2.4

References

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000365
• http://www.debian.org/security/2000/20001219
• http://www.linux-mandrake.com/en/updates/2000/MDKSA-2000-083.php3
• http://www.osvdb.org/6284
• http://www.redhat.com/support/errata/RHSA-2000-127.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5777
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000365
• http://www.debian.org/security/2000/20001219
• http://www.linux-mandrake.com/en/updates/2000/MDKSA-2000-083.php3
• http://www.osvdb.org/6284

Get alerted when CVE-2001-0128 or the next vulnerability affects your stack