Zope < 2.11.3 PythonScript Handling DoS
Medium Nessus Network Monitor Plugin ID 4749
SynopsisThe remote host is vulnerable to a Denial of Service (DoS) attack.
DescriptionThe remote Zope server is vulnerable to a flaw in the way that it handles PythonScript code. Specifically, code may be executed that causes the remote server to use excessive resources. To be successful, an attacker would require the ability to access the application and create or modify PythonScript code. Successful exploitation would result in the attacker running arbitrary code with the permissions of the Zope server and consuming all system resources.
SolutionUpdate to version 2.11.3 or higher.