Approved changes feed: RSS · Atom

cpe:2.3:a:samhain_labs:samhain:1.8.9:*:*:*:*:*:*:*

part: a version: 1.8.9 update: *

VendorSamhain Labs (d149a82b-26b3-57e1-bb93-1f2be30645c6)
ProductSamhain (588a064c-7251-5d4f-9dd5-6785cfcd736c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/samhain purl2cpe 2026-06-01 10:11:24.965413
pkg:deb/ubuntu/samhain purl2cpe 2026-06-01 10:11:24.965415
pkg:github/pilbender/samhain purl2cpe 2026-06-01 10:11:24.965416
pkg:rpm/opensuse/samhain purl2cpe 2026-06-01 10:11:24.965418

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-4810 vulnerable 2026-06-08 04:51:49.968373 Details available
The Secure Remote Password (SRP) implementation in Samhain before 2.5.4 does not check for a certain zero value where required by the protocol, which allows remote attackers to bypass authentication via crafted input.
Published: 2010-04-23T14:00:00.000Z
Updated: 2024-09-17T01:50:50.812Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2410 vulnerable 2026-06-08 04:48:09.576749 Details available
Unknown vulnerability in sh_hash_compdata for Samhain 1.8.9 through 2.0.1 might allow attackers to cause a denial of service (null pointer dereference).
Published: 2005-08-18T04:00:00.000Z
Updated: 2024-09-16T16:13:04.835Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2409 vulnerable 2026-06-08 04:48:09.570557 Details available
Buffer overflow in the sh_hash_compdata function for Samhain 1.8.9 through 2.0.1, when running in update mode ("-t update"), might allow attackers to execute arbitrary code.
Published: 2005-08-18T04:00:00.000Z
Updated: 2024-08-08T01:29:12.801Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.