Approved changes feed: RSS · Atom

cpe:2.3:a:gentoo:portage:2.0.50:-:*:*:*:*:*:*

part: a version: 2.0.50 update: -

VendorGentoo (7fa277de-5a05-5db1-a5d1-2f4db074c494)
ProductPortage (4f646bfd-706c-5e8f-bcb7-1fca1a99d931)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/gentoo/portage purl2cpe 2026-06-01 10:12:48.620233
pkg:pypi/portage purl2cpe 2026-06-01 10:12:48.620234

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2004-1901 vulnerable 2026-06-03 14:26:45.735987 Details available
Portage before 2.0.50-r3 allows local users to overwrite arbitrary files via a hard link attack on the lockfiles.
Published: 2005-05-10T04:00:00.000Z
Updated: 2025-01-16T18:09:40.758Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.