CVE-2010-3198

Severity Score

4.3

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions.

ZServer de Zope v2.10.x anterior a v2.10.12 y v2.11x anterior a v2.11.7 permite a atacantes remotos provocar una denegación de servicio (caída de los procesos activos) a través de vectores que provoquen excepciones no controladas.

*Credits: N/A

CVSS Scores

NISTv2 4.3

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2010-08-31 CVE Reserved
2010-09-08 CVE Published
2024-09-16 CVE Updated
2024-09-16 First Exploit
2024-09-17 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CAPEC

References (6)

URL	Tag	Source
http://www.securityfocus.com/bid/42939	Vdb Entry
http://www.zope.org/Products/Zope/2.10.12/CHANGES.txt	X_refsource_confirm
http://www.zope.org/Products/Zope/2.11.7/CHANGES.txt	X_refsource_confirm

URL	Date	SRC
https://bugs.launchpad.net/zope2/+bug/627988	2024-09-16

URL	Date	SRC
https://mail.zope.org/pipermail/zope-announce/2010-September/002247.html	2010-09-10

URL	Date	SRC
http://www.vupen.com/english/advisories/2010/2275	2010-09-10

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Zope Search vendor "Zope"		Zope Search vendor "Zope" for product "Zope"				2.10.0-b1 Search vendor "Zope" for product "Zope" and version "2.10.0-b1"		-		Affected
Zope Search vendor "Zope"		Zope Search vendor "Zope" for product "Zope"				2.10.0-b2 Search vendor "Zope" for product "Zope" and version "2.10.0-b2"		-		Affected
Zope Search vendor "Zope"		Zope Search vendor "Zope" for product "Zope"				2.10.0-c1 Search vendor "Zope" for product "Zope" and version "2.10.0-c1"		-		Affected
Zope Search vendor "Zope"		Zope Search vendor "Zope" for product "Zope"				2.10.0-final Search vendor "Zope" for product "Zope" and version "2.10.0-final"		-		Affected
Zope Search vendor "Zope"		Zope Search vendor "Zope" for product "Zope"				2.10.2 Search vendor "Zope" for product "Zope" and version "2.10.2"		-		Affected
Zope Search vendor "Zope"		Zope Search vendor "Zope" for product "Zope"				2.10.2-b1 Search vendor "Zope" for product "Zope" and version "2.10.2-b1"		-		Affected
Zope Search vendor "Zope"		Zope Search vendor "Zope" for product "Zope"				2.10.2-final Search vendor "Zope" for product "Zope" and version "2.10.2-final"		-		Affected
Zope Search vendor "Zope"		Zope Search vendor "Zope" for product "Zope"				2.10.3 Search vendor "Zope" for product "Zope" and version "2.10.3"		-		Affected
Zope Search vendor "Zope"		Zope Search vendor "Zope" for product "Zope"				2.10.3-final Search vendor "Zope" for product "Zope" and version "2.10.3-final"		-		Affected
Zope Search vendor "Zope"		Zope Search vendor "Zope" for product "Zope"				2.10.4-final Search vendor "Zope" for product "Zope" and version "2.10.4-final"		-		Affected
Zope Search vendor "Zope"		Zope Search vendor "Zope" for product "Zope"				2.10.5 Search vendor "Zope" for product "Zope" and version "2.10.5"		-		Affected
Zope Search vendor "Zope"		Zope Search vendor "Zope" for product "Zope"				2.10.6 Search vendor "Zope" for product "Zope" and version "2.10.6"		-		Affected
Zope Search vendor "Zope"		Zope Search vendor "Zope" for product "Zope"				2.10.7 Search vendor "Zope" for product "Zope" and version "2.10.7"		-		Affected
Zope Search vendor "Zope"		Zope Search vendor "Zope" for product "Zope"				2.10.8 Search vendor "Zope" for product "Zope" and version "2.10.8"		-		Affected
Zope Search vendor "Zope"		Zope Search vendor "Zope" for product "Zope"				2.10.9 Search vendor "Zope" for product "Zope" and version "2.10.9"		-		Affected
Zope Search vendor "Zope"		Zope Search vendor "Zope" for product "Zope"				2.10.10 Search vendor "Zope" for product "Zope" and version "2.10.10"		-		Affected
Zope Search vendor "Zope"		Zope Search vendor "Zope" for product "Zope"				2.10.11 Search vendor "Zope" for product "Zope" and version "2.10.11"		-		Affected
Zope Search vendor "Zope"		Zope Search vendor "Zope" for product "Zope"				2.11.0 Search vendor "Zope" for product "Zope" and version "2.11.0"		-		Affected
Zope Search vendor "Zope"		Zope Search vendor "Zope" for product "Zope"				2.11.0a1 Search vendor "Zope" for product "Zope" and version "2.11.0a1"		-		Affected
Zope Search vendor "Zope"		Zope Search vendor "Zope" for product "Zope"				2.11.0b1 Search vendor "Zope" for product "Zope" and version "2.11.0b1"		-		Affected
Zope Search vendor "Zope"		Zope Search vendor "Zope" for product "Zope"				2.11.0c1 Search vendor "Zope" for product "Zope" and version "2.11.0c1"		-		Affected
Zope Search vendor "Zope"		Zope Search vendor "Zope" for product "Zope"				2.11.1 Search vendor "Zope" for product "Zope" and version "2.11.1"		-		Affected
Zope Search vendor "Zope"		Zope Search vendor "Zope" for product "Zope"				2.11.2 Search vendor "Zope" for product "Zope" and version "2.11.2"		-		Affected
Zope Search vendor "Zope"		Zope Search vendor "Zope" for product "Zope"				2.11.3 Search vendor "Zope" for product "Zope" and version "2.11.3"		-		Affected
Zope Search vendor "Zope"		Zope Search vendor "Zope" for product "Zope"				2.11.4 Search vendor "Zope" for product "Zope" and version "2.11.4"		-		Affected
Zope Search vendor "Zope"		Zope Search vendor "Zope" for product "Zope"				2.11.5 Search vendor "Zope" for product "Zope" and version "2.11.5"		-		Affected
Zope Search vendor "Zope"		Zope Search vendor "Zope" for product "Zope"				2.11.6 Search vendor "Zope" for product "Zope" and version "2.11.6"		-		Affected