CVE-2011-3587

Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p_ class in OFS/misc_.py and the use of Python modules.

• http://plone.org/products/plone-hotfix/releases/20110928Patch
• http://plone.org/products/plone-hotfix/releases/20110928/PloneHotfix20110928-1.0.zipPatch
• http://plone.org/products/plone/security/advisories/20110928Patch, Vendor Advisory
• http://pypi.python.org/pypi/Products.PloneHotfix20110928/1.0Patch
• http://secunia.com/advisories/46221Vendor Advisory
• http://secunia.com/advisories/46323
• http://zope2.zope.org/news/security-vulnerability-announcement-cve-2011-3587Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=742297Patch
• http://plone.org/products/plone-hotfix/releases/20110928Patch
• http://plone.org/products/plone-hotfix/releases/20110928/PloneHotfix20110928-1.0.zipPatch
• http://plone.org/products/plone/security/advisories/20110928Patch, Vendor Advisory
• http://pypi.python.org/pypi/Products.PloneHotfix20110928/1.0Patch
• http://secunia.com/advisories/46221Vendor Advisory
• http://secunia.com/advisories/46323
• http://zope2.zope.org/news/security-vulnerability-announcement-cve-2011-3587Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=742297Patch

Published

Oct 10, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-3581Heap-based buffer overflow in the ldns_rr_new_frm_str_intern…
• CVE-2011-3582A Cross-site Request Forgery (CSRF) vulnerability exists in …8.8
• CVE-2011-3583It was found that Typo3 Core versions 4.5.0 - 4.5.5 uses pre…9.8
• CVE-2011-3584The TYPO3 Core wec_discussion extension before 2.1.1 is vuln…9.8
• CVE-2011-3585Multiple race conditions in the (1) mount.cifs and (2) umoun…4.7
• CVE-2011-3586Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2011-3588The SSH configuration in the Red Hat mkdumprd script for kex…
• CVE-2011-3589The Red Hat mkdumprd script for kexec-tools, as distributed …
• CVE-2011-3590The Red Hat mkdumprd script for kexec-tools, as distributed …
• CVE-2011-3591Multiple cross-site scripting (XSS) vulnerabilities in phpMy…
• CVE-2011-3592Multiple cross-site scripting (XSS) vulnerabilities in the P…
• CVE-2011-3593A certain Red Hat patch to the vlan_hwaccel_do_receive funct…