GCVE - cpe:2.3:o:freebsd:freebsd:5.4:stable:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:freebsd:freebsd:5.4:stable:*:*:*:*:*:*

part: o version: 5.4 update: stable

Vendor	Freebsd (`1e86ea60-a74f-5f45-ac35-3eb819c9e064`)
Product	Freebsd (`be9b20ed-2a20-5a94-a224-b1a6fdcacb17`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/freebsd/freebsd-src`	purl2cpe	2026-06-01 10:12:45.332548

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-1148`	not_vulnerable	2026-06-08 04:50:19.160642	Details available A certain pseudo-random number generator (PRNG) algorithm that uses ADD with 0 random hops (aka "Algorithm A0"), as used in OpenBSD 3.5 through 4.2 and NetBSD 1.6.2 through 4.0, allows remote attackers to guess sensitive values such as (1) DNS transaction IDs or (2) IP fragmentation IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as DNS cache poisoning, injection into TCP packets, and OS fingerprinting. Published: 2008-03-04T23:00:00.000Z Updated: 2024-08-07T08:08:57.600Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/487658 https://exchange.xforce.ibmcloud.com/vulnerabilities/41157 http://secunia.com/advisories/28819 http://www.trusteer.com/docs/OpenBSD_DNS_Cache_Poisoning_and_Multiple_OS_Predictable_IP_ID_Vulnerability.pdf http://www.securiteam.com/securityreviews/5PP0H0UNGW.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1147`	not_vulnerable	2026-06-08 04:50:19.155767	Details available A certain pseudo-random number generator (PRNG) algorithm that uses XOR and 2-bit random hops (aka "Algorithm X2"), as used in OpenBSD 2.6 through 3.4, Mac OS X 10 through 10.5.1, FreeBSD 4.4 through 7.0, and DragonFlyBSD 1.0 through 1.10.1, allows remote attackers to guess sensitive values such as IP fragmentation IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as injection into TCP packets and OS fingerprinting. Published: 2008-03-04T23:00:00.000Z Updated: 2024-08-07T08:08:57.697Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/41155 http://seclists.org/bugtraq/2008/Feb/0063.html http://seclists.org/bugtraq/2008/Feb/0052.html http://www.securityfocus.com/archive/1/487658 http://secunia.com/advisories/28819	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1146`	not_vulnerable	2026-06-08 04:50:19.123852	Details available A certain pseudo-random number generator (PRNG) algorithm that uses XOR and 3-bit random hops (aka "Algorithm X3"), as used in OpenBSD 2.8 through 4.2, allows remote attackers to guess sensitive values such as DNS transaction IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as DNS cache poisoning against OpenBSD's modification of BIND. Published: 2008-03-04T23:00:00.000Z Updated: 2024-08-07T08:08:57.711Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/487658 http://secunia.com/advisories/28819 http://www.trusteer.com/docs/OpenBSD_DNS_Cache_Poisoning_and_Multiple_OS_Predictable_IP_ID_Vulnerability.pdf http://www.securiteam.com/securityreviews/5PP0H0UNGW.html https://exchange.xforce.ibmcloud.com/vulnerabilities/40329	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2655`	vulnerable	2026-06-08 04:49:07.242719	Details available The build process for ypserv in FreeBSD 5.3 up to 6.1 accidentally disables access restrictions when using the /var/yp/securenets file, which allows remote attackers to bypass intended access restrictions. Published: 2006-06-02T01:00:00.000Z Updated: 2024-08-07T17:58:51.786Z Open on db.gcve.eu Reference links http://www.osvdb.org/25852 http://secunia.com/advisories/20389 https://exchange.xforce.ibmcloud.com/vulnerabilities/26792 http://security.freebsd.org/advisories/FreeBSD-SA-06:15.ypserv.asc http://www.securityfocus.com/bid/18204	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2654`	vulnerable	2026-06-08 04:49:07.240672	Details available Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences. NOTE: this is similar to CVE-2006-1864, but this is a different implementation of smbfs, so it has a different CVE identifier. Published: 2006-06-02T01:00:00.000Z Updated: 2024-08-07T17:58:51.874Z Open on db.gcve.eu Reference links http://www.osvdb.org/25851 http://secunia.com/advisories/20390 http://www.securityfocus.com/bid/18202 http://security.freebsd.org/advisories/FreeBSD-SA-06:16.smbfs.asc http://securitytracker.com/id?1016194	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1283`	vulnerable	2026-06-08 04:48:56.827354	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0905`	vulnerable	2026-06-08 04:48:55.743211	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0883`	vulnerable	2026-06-08 04:48:55.609714	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0380`	vulnerable	2026-06-08 04:48:53.655502	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0379`	vulnerable	2026-06-08 04:48:53.655083	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.