GCVE - cpe:2.3:o:netbsd:netbsd:4.0:beta2:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:netbsd:netbsd:4.0:beta2:*:*:*:*:*:*

part: o version: 4.0 update: beta2

Vendor	Netbsd (`d97e796d-00dc-5b79-b428-0d0c6adaeef6`)
Product	Netbsd (`ca6879a6-363f-5749-9139-ea8a36b24a66`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:netbsd/netbsd`	purl2cpe	2026-06-01 10:15:23.709264

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-2530`	vulnerable	2026-06-08 04:55:08.473712	Details available Multiple integer signedness errors in smb_subr.c in the netsmb module in the kernel in NetBSD 5.0.2 and earlier, FreeBSD, and Apple Mac OS X allow local users to cause a denial of service (panic) via a negative size value in a /dev/nsmb ioctl operation, as demonstrated by a (1) SMBIOC_LOOKUP or (2) SMBIOC_OPENSESSION ioctl call. Published: 2010-09-29T16:00:00.000Z Updated: 2024-09-16T23:45:53.259Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2010/07/12/6 http://www.securityfocus.com/bid/41557 http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/netsmb/smb_subr.c.diff?r1=1.34&r2=1.35&only_with_tag=MAIN&f=h http://www.openwall.com/lists/oss-security/2010/07/16/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2482`	vulnerable	2026-06-08 04:51:28.841304	Details available The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are not in the wheel group. Published: 2009-07-16T16:00:00.000Z Updated: 2024-08-07T05:52:15.081Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1022432 ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-004.txt.asc http://secunia.com/advisories/35553 http://osvdb.org/55284 http://www.securityfocus.com/bid/35465	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1148`	not_vulnerable	2026-06-08 04:50:19.161259	Details available A certain pseudo-random number generator (PRNG) algorithm that uses ADD with 0 random hops (aka "Algorithm A0"), as used in OpenBSD 3.5 through 4.2 and NetBSD 1.6.2 through 4.0, allows remote attackers to guess sensitive values such as (1) DNS transaction IDs or (2) IP fragmentation IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as DNS cache poisoning, injection into TCP packets, and OS fingerprinting. Published: 2008-03-04T23:00:00.000Z Updated: 2024-08-07T08:08:57.600Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/487658 https://exchange.xforce.ibmcloud.com/vulnerabilities/41157 http://secunia.com/advisories/28819 http://www.trusteer.com/docs/OpenBSD_DNS_Cache_Poisoning_and_Multiple_OS_Predictable_IP_ID_Vulnerability.pdf http://www.securiteam.com/securityreviews/5PP0H0UNGW.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1147`	not_vulnerable	2026-06-08 04:50:19.156403	Details available A certain pseudo-random number generator (PRNG) algorithm that uses XOR and 2-bit random hops (aka "Algorithm X2"), as used in OpenBSD 2.6 through 3.4, Mac OS X 10 through 10.5.1, FreeBSD 4.4 through 7.0, and DragonFlyBSD 1.0 through 1.10.1, allows remote attackers to guess sensitive values such as IP fragmentation IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as injection into TCP packets and OS fingerprinting. Published: 2008-03-04T23:00:00.000Z Updated: 2024-08-07T08:08:57.697Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/41155 http://seclists.org/bugtraq/2008/Feb/0063.html http://seclists.org/bugtraq/2008/Feb/0052.html http://www.securityfocus.com/archive/1/487658 http://secunia.com/advisories/28819	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1146`	not_vulnerable	2026-06-08 04:50:19.140953	Details available A certain pseudo-random number generator (PRNG) algorithm that uses XOR and 3-bit random hops (aka "Algorithm X3"), as used in OpenBSD 2.8 through 4.2, allows remote attackers to guess sensitive values such as DNS transaction IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as DNS cache poisoning against OpenBSD's modification of BIND. Published: 2008-03-04T23:00:00.000Z Updated: 2024-08-07T08:08:57.711Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/487658 http://secunia.com/advisories/28819 http://www.trusteer.com/docs/OpenBSD_DNS_Cache_Poisoning_and_Multiple_OS_Predictable_IP_ID_Vulnerability.pdf http://www.securiteam.com/securityreviews/5PP0H0UNGW.html https://exchange.xforce.ibmcloud.com/vulnerabilities/40329	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3654`	vulnerable	2026-06-08 04:49:54.496485	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-1677`	vulnerable	2026-06-08 04:49:43.225369	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.