Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p_ class in OFS/misc_.py and the use of Python modules.

The version of Plone installed on the remote host is 4.x prior to 4.0.10 or 4.1.x prior to 4.1.1. It is, therefore, affected by the following vulnerabilities:

  - Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used allows remote attackers to execute arbitrary     commands via vectors related to the p_ class in OFS/misc_.py and the use of Python modules. (CVE-2011-3587)

  - The CMFEditions component 2.x does not prevent the KwAsAttributes classes from being publishable, which     allows remote attackers to access sub-objects via unspecified vectors, a different vulnerability than     CVE-2011-3587. (CVE-2011-4030)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. Since a vendor hotfix (PloneHotfix20110928) may remediate this without a version upgrade, this plugin only reports when running in Paranoid mode.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2
    through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p_ class
    in OFS/misc_.py and the use of Python modules. (CVE-2011-3587)

The version of Plone hosted on the remote web server has a flaw that allows arbitrary access to Python modules.  Using a specially crafted URL, this can allow an unauthenticated, remote attacker the ability to run arbitrary commands on the system through the Python 'os' module in the context of the 'Zope/Plone' service.

ID	Name	Product	Family	Type	Severity
329034	Plone 4.x < 4.0.10 / 4.1.x < 4.1.1 Multiple Vulnerabilities (HF 20110928)	Nessus	Misc.	Local	critical
436997	SCA: security update for zope2 (GHSA-8w48-m6hx-rjw2)	Tenable Cloud Security	SCA Checks	Local	high
436997	SCA: security update for zope2 (GHSA-8w48-m6hx-rjw2)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
57350	Plone Request Parsing Remote Command Execution	Nessus	CGI abuses	Remote	high

Detections

Analytics

CVE-2011-3587

high

Tenable Plugins

critical

high

high

high