Secunia

A vulnerability has been reported in Zope Object Database, which can be exploited by malicious users to disclose potentially sensitive information or delete certain files.

The vulnerability is caused due to an unspecified error in the Zope Enterprise Objects (ZEO) server implementation, which can be exploited to read or delete arbitrary files on the system with permissions of the server process.

Successful exploitation requires write access to a ZEO server and that the server is configured to support blobs.

The vulnerability is reported in version 3.8. Other versions may also be affected.

Solution
Update to version 3.8.3.
Further details available in Customer Area

Provided and/or discovered by
Reported by the vendor.

Original Advisory
https://mail.zope.org/pipermail/zope-announce/2009-September/002221.html

Deep Links
Links available in Customer Area