Approved changes feed: RSS · Atom

cpe:2.3:a:zoneminder:zoneminder:1.23.3:*:*:*:*:*:*:*

part: a version: 1.23.3 update: *

VendorZoneminder (e6e02621-7fd3-519d-9da5-7d751a0c0507)
ProductZoneminder (bce2b260-429d-537f-a893-eaa0ebd37c1c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/zoneminder purl2cpe 2026-06-01 10:11:26.755116
pkg:deb/ubuntu/zoneminder purl2cpe 2026-06-01 10:11:26.755118
pkg:github/zoneminder/zoneminder purl2cpe 2026-06-01 10:11:26.755119
pkg:rpm/opensuse/zoneminder purl2cpe 2026-06-01 10:11:26.755121
pkg:sourceforge/zoneminder purl2cpe 2026-06-01 10:11:26.755122

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-6756 vulnerable 2026-06-08 04:51:04.788763 Details available
ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local users to obtain the database username and password by reading this file.
Published: 2009-04-27T22:00:00.000Z
Updated: 2024-08-07T11:42:00.193Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-6755 vulnerable 2026-06-08 04:51:04.787820 Details available
ZoneMinder 1.23.3 on Fedora 10 sets the ownership of /etc/zm.conf to the apache user account, and sets the permissions to 0600, which makes it easier for remote attackers to modify this file by accessing it through a (1) PHP or (2) CGI script.
Published: 2009-04-27T22:00:00.000Z
Updated: 2024-08-07T11:42:00.804Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.