Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:cfengine:1.6:a10:*:*:*:*:*:*

part: a version: 1.6 update: a10

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductCfengine (55e8a25d-d543-51e9-b2d6-d7db78c7ef06)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/cfengine3 purl2cpe 2026-06-01 10:11:54.087072
pkg:deb/ubuntu/cfengine3 purl2cpe 2026-06-01 10:11:54.087074
pkg:github/cfengine/core purl2cpe 2026-06-01 10:11:54.087075
pkg:gnu/cfengine purl2cpe 2026-06-01 10:11:54.087077
pkg:rpm/opensuse/cfengine purl2cpe 2026-06-01 10:11:54.087078

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-2960 vulnerable 2026-06-08 04:48:30.979448 Details available
cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in, a different vulnerability than CVE-2005-3137.
Published: 2005-10-05T04:00:00.000Z
Updated: 2024-08-07T22:53:29.987Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0947 vulnerable 2026-06-08 04:45:19.008406 Details available
Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command.
Published: 2001-01-22T05:00:00.000Z
Updated: 2024-08-08T05:37:31.982Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.