Description
Digital Creations Zope 2.3.2 and earlier allows a local attacker to gain additional privileges via the changing of ZClass permission mappings for objects and methods in the ZClass.
References
- MDKSA-2001:049 vendor-advisory
- zope-zclass-gain-privileges(6958) vdb-entry
- http://www.zope.org/Products/Zope/Hotfix_2001-05-01/security_alert
- DSA-055 vendor-advisory
- RHSA-2001:065 vendor-advisory
- CLA-2001:407 vendor-advisory