Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:cfengine:1.6:a11:*:*:*:*:*:*

part: a version: 1.6 update: a11

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductCfengine (55e8a25d-d543-51e9-b2d6-d7db78c7ef06)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/cfengine3 purl2cpe 2026-06-01 10:11:54.089224
pkg:deb/ubuntu/cfengine3 purl2cpe 2026-06-01 10:11:54.089226
pkg:github/cfengine/core purl2cpe 2026-06-01 10:11:54.089228
pkg:gnu/cfengine purl2cpe 2026-06-01 10:11:54.089229
pkg:rpm/opensuse/cfengine purl2cpe 2026-06-01 10:11:54.089230

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-2960 vulnerable 2026-06-08 04:48:30.980385 Details available
cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in, a different vulnerability than CVE-2005-3137.
Published: 2005-10-05T04:00:00.000Z
Updated: 2024-08-07T22:53:29.987Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.