CVE-2001-0128

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Mar 12, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-012910.0Buffer overflow in Tinyproxy HTTP proxy 1.3.3 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrarCVE-2001-013010.0Buffer overflow in HTML parser of the Lotus R5 Domino Server before 5.06, and Domino Client before 5.05, allows remote attackers to cause a CVE-2001-01313.3htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack.CVE-2001-01321.2Interscan VirusWall 3.6.x and earlier follows symbolic links when uninstalling the product, which allows local users to overwrite arbitrary CVE-2001-013310.0The web administration interface for Interscan VirusWall 3.6.x and earlier does not use encryption, which could allow remote attackers to obCVE-2001-013410.0Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and ManagementCVE-2001-01352.1The default installation of Ultraboard 2000 2.11 creates the Skins, Database, and Backups directories with world-writeable permissions, whicCVE-2001-01365.0Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commanCVE-2001-01375.1Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a sCVE-2001-01381.2privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack.CVE-2001-01391.2inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations.CVE-2001-01401.2arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
CVE-2001-0128: High severity, CVSS 7.2 | Vulnix