Approved changes feed: RSS · Atom

cpe:2.3:o:freebsd:freebsd:5.4:releng:*:*:*:*:*:*

part: o version: 5.4 update: releng

VendorFreebsd (1e86ea60-a74f-5f45-ac35-3eb819c9e064)
ProductFreebsd (be9b20ed-2a20-5a94-a224-b1a6fdcacb17)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/freebsd/freebsd-src purl2cpe 2026-06-01 10:12:45.331133

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-1148 not_vulnerable 2026-06-08 04:50:19.160626 Details available
A certain pseudo-random number generator (PRNG) algorithm that uses ADD with 0 random hops (aka "Algorithm A0"), as used in OpenBSD 3.5 through 4.2 and NetBSD 1.6.2 through 4.0, allows remote attackers to guess sensitive values such as (1) DNS transaction IDs or (2) IP fragmentation IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as DNS cache poisoning, injection into TCP packets, and OS fingerprinting.
Published: 2008-03-04T23:00:00.000Z
Updated: 2024-08-07T08:08:57.600Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1147 not_vulnerable 2026-06-08 04:50:19.155748 Details available
A certain pseudo-random number generator (PRNG) algorithm that uses XOR and 2-bit random hops (aka "Algorithm X2"), as used in OpenBSD 2.6 through 3.4, Mac OS X 10 through 10.5.1, FreeBSD 4.4 through 7.0, and DragonFlyBSD 1.0 through 1.10.1, allows remote attackers to guess sensitive values such as IP fragmentation IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as injection into TCP packets and OS fingerprinting.
Published: 2008-03-04T23:00:00.000Z
Updated: 2024-08-07T08:08:57.697Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1146 not_vulnerable 2026-06-08 04:50:19.123315 Details available
A certain pseudo-random number generator (PRNG) algorithm that uses XOR and 3-bit random hops (aka "Algorithm X3"), as used in OpenBSD 2.8 through 4.2, allows remote attackers to guess sensitive values such as DNS transaction IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as DNS cache poisoning against OpenBSD's modification of BIND.
Published: 2008-03-04T23:00:00.000Z
Updated: 2024-08-07T08:08:57.711Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2655 vulnerable 2026-06-08 04:49:07.242703 Details available
The build process for ypserv in FreeBSD 5.3 up to 6.1 accidentally disables access restrictions when using the /var/yp/securenets file, which allows remote attackers to bypass intended access restrictions.
Published: 2006-06-02T01:00:00.000Z
Updated: 2024-08-07T17:58:51.786Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2654 vulnerable 2026-06-08 04:49:07.240206 Details available
Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences. NOTE: this is similar to CVE-2006-1864, but this is a different implementation of smbfs, so it has a different CVE identifier.
Published: 2006-06-02T01:00:00.000Z
Updated: 2024-08-07T17:58:51.874Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1283 vulnerable 2026-06-08 04:48:56.827337 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0905 vulnerable 2026-06-08 04:48:55.743193 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0883 vulnerable 2026-06-08 04:48:55.609696 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0381 vulnerable 2026-06-08 04:48:53.660264 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0055 vulnerable 2026-06-08 04:48:45.849357 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2218 vulnerable 2026-06-08 04:48:28.654170 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0988 vulnerable 2026-06-08 04:48:14.154149 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.