Approved changes feed: RSS · Atom

cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:*

part: o version: 4.1.1 update: release

VendorFreebsd (1e86ea60-a74f-5f45-ac35-3eb819c9e064)
ProductFreebsd (be9b20ed-2a20-5a94-a224-b1a6fdcacb17)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/freebsd/freebsd-src purl2cpe 2026-06-01 10:12:45.236965

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-1283 vulnerable 2026-06-08 04:48:56.810955 Details available
opiepasswd in One-Time Passwords in Everything (OPIE) in FreeBSD 4.10-RELEASE-p22 through 6.1-STABLE before 20060322 uses the getlogin function to determine the invoking user account, which might allow local users to configure OPIE access to the root account and possibly gain root privileges if a root shell is permitted by the configuration of the wheel group or sshd.
Published: 2006-03-23T20:00:00.000Z
Updated: 2024-08-07T17:03:28.908Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1126 vulnerable 2026-06-08 04:48:25.562034 Details available
The SIOCGIFCONF ioctl (ifconf function) in FreeBSD 4.x through 4.11 and 5.x through 5.4 does not properly clear a buffer before using it, which allows local users to obtain portions of sensitive kernel memory.
Published: 2005-04-16T04:00:00.000Z
Updated: 2024-08-07T21:35:59.959Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0988 vulnerable 2026-06-08 04:48:14.146304 Details available
Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.
Published: 2005-04-06T04:00:00.000Z
Updated: 2024-08-07T21:35:59.902Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0708 vulnerable 2026-06-08 04:48:13.419805 Details available
The sendfile system call in FreeBSD 4.8 through 4.11 and 5 through 5.4 can transfer portions of kernel memory if a file is truncated while it is being sent, which could allow remote attackers to obtain sensitive information.
Published: 2005-04-05T04:00:00.000Z
Updated: 2024-08-07T21:21:06.609Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0610 vulnerable 2026-06-08 04:48:13.154473 Details available
Multiple symlink vulnerabilities in portupgrade before 20041226_2 in FreeBSD allow local users to (1) overwrite arbitrary files and possibly replace packages to execute arbitrary code via pkg_fetch, (2) overwrite arbitrary files via temporary files when portupgrade upgrades a port or package, or (3) create arbitrary zero-byte files via the pkgdb.fixme temporary file.
Published: 2005-04-13T04:00:00.000Z
Updated: 2024-08-07T21:21:06.498Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0356 vulnerable 2026-06-08 04:48:12.398269 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0109 vulnerable 2026-06-08 04:48:11.377818 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1471 vulnerable 2026-06-08 04:47:54.280681 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0125 vulnerable 2026-06-08 04:47:48.621600 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0002 vulnerable 2026-06-08 04:47:48.045745 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0028 vulnerable 2026-06-08 04:47:20.293892 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-2092 vulnerable 2026-06-08 04:47:19.068265 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0973 vulnerable 2026-06-08 04:46:22.596319 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0754 vulnerable 2026-06-08 04:46:22.148782 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-1066 vulnerable 2026-06-08 04:45:19.226438 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0915 vulnerable 2026-06-08 04:45:18.970506 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.