← All advisories

Moderate severityNVD Advisory· Published Jul 23, 2002· Updated Jun 16, 2026

CVE-2002-0687

CVE-2002-0687

Description

The "through the web code" capability for Zope 2.0 through 2.5.1 b1 allows untrusted users to shut down the Zope server via certain headers.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
zopePyPI	>= 2.0.0, < 2.4.4b2	2.4.4b2
zopePyPI	>= 2.5.0, < 2.5.1b2	2.5.1b2

Affected products

2

Zope/Zope
cpe:2.3:a:zope:zope:*:*:*:*:*:*:*:*
Range: <=2.5.1b1
ghsa-coords
pkg:pypi/zope
Range: >= 2.0.0, < 2.4.4b2

Patches

Vulnerability mechanics

References

12

www.zope.org/Products/Zope/Hotfix_2002-04-15/security_alertnvdPatchVendor AdvisoryWEB
github.com/advisories/GHSA-vwrc-g9q6-f675ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2002-0687ghsaADVISORY
www.redhat.com/support/errata/RHSA-2002-060.htmlnvdWEB
marc.infoghsaWEB
marc.infoghsaWEB
marc.infoghsaWEB
web.archive.org/web/20020822024423/http://www.iss.net/security_center/static/9621.phpghsaWEB
web.archive.org/web/20021018100409/http://online.securityfocus.com/bid/5813ghsaWEB
www.iss.net/security_center/static/9621.phpnvd
www.osvdb.org/5166nvd
www.securityfocus.com/bid/5813nvd

News mentions

0

No linked articles in our index yet.