Approved changes feed: RSS · Atom
cpe:2.3:o:freebsd:freebsd:6.0:stable:*:*:*:*:*:*
part: o version: 6.0 update: stable
| Vendor | Freebsd (1e86ea60-a74f-5f45-ac35-3eb819c9e064) |
|---|---|
| Product | Freebsd (be9b20ed-2a20-5a94-a224-b1a6fdcacb17) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/freebsd/freebsd-src |
purl2cpe | 2026-06-01 10:12:45.344232 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-1391 |
vulnerable | 2026-06-08 04:50:20.430043 |
Details available
Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary code via large values of certain integer fields in the format argument to (1) the strfmon function in lib/libc/stdlib/strfmon.c, related to the GET_NUMBER macro; and (2) the printf function, related to left_prec and right_prec.
Published: 2008-03-27T17:00:00.000Z
Updated: 2024-08-07T08:17:34.850Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1148 |
not_vulnerable | 2026-06-08 04:50:19.160730 |
Details available
A certain pseudo-random number generator (PRNG) algorithm that uses ADD with 0 random hops (aka "Algorithm A0"), as used in OpenBSD 3.5 through 4.2 and NetBSD 1.6.2 through 4.0, allows remote attackers to guess sensitive values such as (1) DNS transaction IDs or (2) IP fragmentation IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as DNS cache poisoning, injection into TCP packets, and OS fingerprinting.
Published: 2008-03-04T23:00:00.000Z
Updated: 2024-08-07T08:08:57.600Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1147 |
not_vulnerable | 2026-06-08 04:50:19.155856 |
Details available
A certain pseudo-random number generator (PRNG) algorithm that uses XOR and 2-bit random hops (aka "Algorithm X2"), as used in OpenBSD 2.6 through 3.4, Mac OS X 10 through 10.5.1, FreeBSD 4.4 through 7.0, and DragonFlyBSD 1.0 through 1.10.1, allows remote attackers to guess sensitive values such as IP fragmentation IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as injection into TCP packets and OS fingerprinting.
Published: 2008-03-04T23:00:00.000Z
Updated: 2024-08-07T08:08:57.697Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1146 |
not_vulnerable | 2026-06-08 04:50:19.126445 |
Details available
A certain pseudo-random number generator (PRNG) algorithm that uses XOR and 3-bit random hops (aka "Algorithm X3"), as used in OpenBSD 2.8 through 4.2, allows remote attackers to guess sensitive values such as DNS transaction IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as DNS cache poisoning against OpenBSD's modification of BIND.
Published: 2008-03-04T23:00:00.000Z
Updated: 2024-08-07T08:08:57.711Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-0216 |
vulnerable | 2026-06-08 04:50:10.501158 |
Details available
The ptsname function in FreeBSD 6.0 through 7.0-PRERELEASE does not properly verify that a certain portion of a device name is associated with a pty of a user who is calling the pt_chown function, which might allow local users to read data from the pty from another user.
Published: 2008-01-16T01:00:00.000Z
Updated: 2024-08-07T07:39:34.349Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2655 |
vulnerable | 2026-06-08 04:49:07.242768 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2654 |
vulnerable | 2026-06-08 04:49:07.242099 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-1283 |
vulnerable | 2026-06-08 04:48:56.827390 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0905 |
vulnerable | 2026-06-08 04:48:55.743251 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0381 |
vulnerable | 2026-06-08 04:48:53.660335 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0380 |
vulnerable | 2026-06-08 04:48:53.655525 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0379 |
vulnerable | 2026-06-08 04:48:53.655129 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0226 |
vulnerable | 2026-06-08 04:48:53.160593 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0055 |
vulnerable | 2026-06-08 04:48:45.850638 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.