Ubuntu Security Notice 848-1 – It was discovered that the Zope Object Database (ZODB) database server (ZEO) improperly filtered certain commands when a database is shared among multiple applications or application instances. A remote attacker could send malicious commands to the server and execute arbitrary code. It was discovered that the Zope Object Database (ZODB) database server (ZEO) did not handle authentication properly when a database is shared among multiple applications or application instances. A remote attacker could use this flaw to bypass security restrictions. It was discovered that Zope did not limit the number of new object ids a client could request. A remote attacker could use this flaw to consume a huge amount of resources, leading to a denial of service.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/82003/USN-848-1.txt
Source: https://packetstormsecurity.com/files/82003/Ubuntu-Security-Notice-848-1.html