CVE-2001-0128: Conectiva Linux

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges.

Affected products

• Conectiva Linux: version 4.2 only; version 5.0 only; version 5.1 only; version 6.0 only
• Debian Debian Linux: version 2.2 only
• Freebsd Freebsd: version 6.2 only
• Mandrakesoft Mandrake Linux: version 7.1 only; version 7.2 only
• Red Hat Linux: version 6.1 only; version 6.2 only; version 7.0 only
• Red Hat Linux Powertools: version 6.1 only; version 6.2 only; version 7.0 only
• Zope Zope: up to and including 2.2.4

Published 2001-03-12. Last modified 2026-06-16.