Approved changes feed: RSS · Atom

cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:*

part: o version: 4.7 update: release

VendorFreebsd (1e86ea60-a74f-5f45-ac35-3eb819c9e064)
ProductFreebsd (be9b20ed-2a20-5a94-a224-b1a6fdcacb17)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/freebsd/freebsd-src purl2cpe 2026-06-01 10:12:45.277222

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-1148 not_vulnerable 2026-06-08 04:50:19.159961 Details available
A certain pseudo-random number generator (PRNG) algorithm that uses ADD with 0 random hops (aka "Algorithm A0"), as used in OpenBSD 3.5 through 4.2 and NetBSD 1.6.2 through 4.0, allows remote attackers to guess sensitive values such as (1) DNS transaction IDs or (2) IP fragmentation IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as DNS cache poisoning, injection into TCP packets, and OS fingerprinting.
Published: 2008-03-04T23:00:00.000Z
Updated: 2024-08-07T08:08:57.600Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1147 not_vulnerable 2026-06-08 04:50:19.155055 Details available
A certain pseudo-random number generator (PRNG) algorithm that uses XOR and 2-bit random hops (aka "Algorithm X2"), as used in OpenBSD 2.6 through 3.4, Mac OS X 10 through 10.5.1, FreeBSD 4.4 through 7.0, and DragonFlyBSD 1.0 through 1.10.1, allows remote attackers to guess sensitive values such as IP fragmentation IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as injection into TCP packets and OS fingerprinting.
Published: 2008-03-04T23:00:00.000Z
Updated: 2024-08-07T08:08:57.697Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1146 not_vulnerable 2026-06-08 04:50:19.101044 Details available
A certain pseudo-random number generator (PRNG) algorithm that uses XOR and 3-bit random hops (aka "Algorithm X3"), as used in OpenBSD 2.8 through 4.2, allows remote attackers to guess sensitive values such as DNS transaction IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as DNS cache poisoning against OpenBSD's modification of BIND.
Published: 2008-03-04T23:00:00.000Z
Updated: 2024-08-07T08:08:57.711Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1283 vulnerable 2026-06-08 04:48:56.824860 Details available
opiepasswd in One-Time Passwords in Everything (OPIE) in FreeBSD 4.10-RELEASE-p22 through 6.1-STABLE before 20060322 uses the getlogin function to determine the invoking user account, which might allow local users to configure OPIE access to the root account and possibly gain root privileges if a root shell is permitted by the configuration of the wheel group or sshd.
Published: 2006-03-23T20:00:00.000Z
Updated: 2024-08-07T17:03:28.908Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1126 vulnerable 2026-06-08 04:48:25.575129 Details available
The SIOCGIFCONF ioctl (ifconf function) in FreeBSD 4.x through 4.11 and 5.x through 5.4 does not properly clear a buffer before using it, which allows local users to obtain portions of sensitive kernel memory.
Published: 2005-04-16T04:00:00.000Z
Updated: 2024-08-07T21:35:59.959Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0988 vulnerable 2026-06-08 04:48:14.146759 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0708 vulnerable 2026-06-08 04:48:13.420257 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0610 vulnerable 2026-06-08 04:48:13.154904 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0356 vulnerable 2026-06-08 04:48:12.398707 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0109 vulnerable 2026-06-08 04:48:11.390135 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1471 vulnerable 2026-06-08 04:47:54.281125 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0125 vulnerable 2026-06-08 04:47:48.622242 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0002 vulnerable 2026-06-08 04:47:48.059908 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1234 vulnerable 2026-06-08 04:47:23.755352 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1230 not_vulnerable 2026-06-08 04:47:23.740515 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0028 vulnerable 2026-06-08 04:47:20.299944 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.