CVE-2009-2701

Unspecified vulnerability in the Zope Enterprise Objects (ZEO) storage-server functionality in Zope Object Database (ZODB) 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing and blob support are enabled, allows remote authenticated users to read or delete arbitrary files via unknown vectors.

• http://pypi.python.org/pypi/ZODB3/3.8.3Patch
• http://pypi.python.org/pypi/ZODB3/3.9.0c2Patch
• http://www.vupen.com/english/advisories/2009/2534Patch, Vendor Advisory
• https://mail.zope.org/pipermail/zope-announce/2009-September/002221.htmlPatch
• http://pypi.python.org/pypi/ZODB3/3.8.3Patch
• http://pypi.python.org/pypi/ZODB3/3.9.0c2Patch
• http://www.vupen.com/english/advisories/2009/2534Patch, Vendor Advisory
• https://mail.zope.org/pipermail/zope-announce/2009-September/002221.htmlPatch

Published

Sep 8, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2695The Linux kernel before 2.6.31-rc7 does not properly prevent…
• CVE-2009-2696Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp…
• CVE-2009-2697The Red Hat build script for the GNOME Display Manager (GDM)…
• CVE-2009-2698The udp_sendmsg function in the UDP implementation in (1) ne…7.8
• CVE-2009-2699The Solaris pollset feature in the Event Port backend in pol…7.5
• CVE-2009-2700src/network/ssl/qsslcertificate.cpp in Nokia Trolltech Qt 4.…
• CVE-2009-2702KDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not properly …
• CVE-2009-2703libpurple/protocols/irc/msgs.c in the IRC protocol plugin in…
• CVE-2009-2704CA SiteMinder allows remote attackers to bypass cross-site s…
• CVE-2009-2705CA SiteMinder allows remote attackers to bypass cross-site s…
• CVE-2009-2706Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2009-2707Unspecified vulnerability in ia32el (aka the IA 32 emulation…