VYPR
← All advisories
Critical severityNVD Advisory· Published Aug 7, 2009· Updated Jun 16, 2026

CVE-2009-0668

CVE-2009-0668

Description

Unspecified vulnerability in Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to execute arbitrary Python code via vectors involving the ZEO network protocol.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
ZODB3PyPI
< 3.8.23.8.2

Affected products

19
  • Zope/Zodb17 versions
    cpe:2.3:a:zope:zodb:*:*:*:*:*:*:*:*+ 16 more
    • cpe:2.3:a:zope:zodb:*:*:*:*:*:*:*:*range: <=3.8.1
    • cpe:2.3:a:zope:zodb:2.10.9:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zodb:2.11.4:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zodb:2.8.11:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zodb:2.9.11:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zodb:3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zodb:3.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zodb:3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zodb:3.2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zodb:3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zodb:3.3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zodb:3.4:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zodb:3.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zodb:3.5:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zodb:3.6:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zodb:3.7:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zodb:3.8.0:*:*:*:*:*:*:*
  • osv-coords2 versions
    pkg:deb/debian/zodb?arch=sourcepkg:pypi/zodb3
    < 1:3.8.2-1+ 1 more
    • (no CPE)range: < 1:3.8.2-1
    • (no CPE)range: < 3.8.2

Patches

Vulnerability mechanics

References

14

News mentions

0

No linked articles in our index yet.