bugtraq - [CVE-2007-5741] Plone: statusmessages and linkintegrity unsafe network data hotfix

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20071106180825.27935.qmail@securityfocus.com>
Date: 6 Nov 2007 18:08:25 -0000
From: mj@...n.com
To: bugtraq@...urityfocus.com
Subject: [CVE-2007-5741] Plone: statusmessages and linkintegrity unsafe
 network data hotfix

A vulnerability in both the statusmessages and linkintegrity modules has been identified, where untrusted network data was treated as a pickle and loaded. This allows an attacker to run arbitrary python code within the Zope/Plone process.

This issue has been assigned CVE-2007-5741

Affected versions
-----------------

This hotfix applies to Plone 2.5 up to and including 2.5.4, and Plone 3.0 up
to and including 3.0.2.

These fixes will be included in the upcoming 2.5.5 and 3.0.3 releases, at
which point this hotfix can be removed.

Earlier plone releases (versions 2.1.x and below) are not affected.

Plone Hotfix 2007-11-06
-----------------------

A hotfix that addresses this vulnerability can be downloaded at:

http://plone.org/products/plone-hotfix/releases/20071106

The hotfix should be installed as soon as possible. To install, simply extract the archive into your Zope/Plone products directory and restart the server.

Martijn Pieters
The Plone Security Response Team