CVE-2007-5741

Description

Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• https://nvd.nist.gov/vuln/detail/CVE-2007-5741
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38288
• https://github.com/plone/Plone
• https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2007-4.yaml
• https://web.archive.org/web/20080507055819/https://plone.org/about/security/advisories/cve-2007-5741
• https://web.archive.org/web/20080517012557/http://www.securityfocus.com/bid/26354
• https://web.archive.org/web/20080906150436/http://www.securityfocus.com/archive/1/483343/100/0/threaded
• http://plone.org/about/security/advisories/cve-2007-5741
• http://www.debian.org/security/2007/dsa-1405
• http://www.securityfocus.com/bid/26354
• http://secunia.com/advisories/27530
• http://secunia.com/advisories/27559
• http://osvdb.org/42072
• http://osvdb.org/42071
• http://www.vupen.com/english/advisories/2007/3754
• http://www.securityfocus.com/archive/1/483343/100/0/threaded