CVE-2002-0687
Zope Server vulnerable to DoS via header injection
CVE-2002-0687 is a medium vulnerability (CVSS 5.0) in Zope, published July 23, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.48%, the 74th percentile. Fixed in zope 2.4.4b2.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 1.48%EPSS, 74th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2.4.4b2zope +2 more
Description
The "through the web code" capability for Zope 2.0 through 2.5.1 b1 allows untrusted users to shut down the Zope server via certain headers.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
The "through the web code" capability for Zope 2.0 through 2.5.1 b1 allows untrusted users to shut down the Zope server via certain headers.
- Record
CVE-2002-0687- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE ListNo score
The "through the web code" capability for Zope 2.0 through 2.5.1 b1 allows untrusted users to shut down the Zope server via certain headers.
- Record
CVE-2002-0687- Updated
- 2026-11-02
EUVDEUVD-2022-1845No score
The "through the web code" capability for Zope 2.0 through 2.5.1 b1 allows untrusted users to shut down the Zope server via certain headers.
- Record
EUVD-2022-1845- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vwrc-g9q6-f675No score
Zope Server vulnerable to DoS via header injection
Zope is a Web application server for Linux. Zope versions 2.0 through 2.5.1 b1 are vulnerable to a denial of service attack, caused by a vulnerability that occurs when using the "through the Web code" capability. A remote attacker could inject malicious headers into a response to cause the vulnerable system to crash.
- Record
GHSA-vwrc-g9q6-f675- Weakness
- CWE-400
- Updated
- 2026-11-02
OSVGHSA-vwrc-g9q6-f675No score
Zope Server vulnerable to DoS via header injection
Zope is a Web application server for Linux. Zope versions 2.0 through 2.5.1 b1 are vulnerable to a denial of service attack, caused by a vulnerability that occurs when using the "through the Web code" capability. A remote attacker could inject malicious headers into a response to cause the vulnerable system to crash.
- Record
GHSA-vwrc-g9q6-f675- Weakness
- CWE-400
- Updated
- 2026-11-02
OSVPYSEC-2026-761No score
Zope Server vulnerable to DoS via header injection
Zope is a Web application server for Linux. Zope versions 2.0 through 2.5.1 b1 are vulnerable to a denial of service attack, caused by a vulnerability that occurs when using the "through the Web code" capability. A remote attacker could inject malicious headers into a response to cause the vulnerable system to crash.
- Record
PYSEC-2026-761- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securityfocus.com/bid/5813
redhat.com/support/errata/RHSA-2002-060.html
osvdb.org/5166
iss.net/security_center/static/9621.php
zope.org/Products/Zope/Hotfix_2002-04-15/security_alert
nvd.nist.gov/vuln/detail/CVE-2002-0687
Show 7 moreShow less
marc.info?l=zope-announce&m=101890177815066&w=2
web.archive.org/web/20020822024423/http://www.iss.net/security_center/static/9621.php
github.com/advisories/GHSA-vwrc-g9q6-f675
pypi.org/project/zope