Approved changes feed: RSS · Atom

cpe:2.3:a:ncompress:ncompress:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNcompress (e2eb500c-a22f-573b-a78d-40b4012eed67)
ProductNcompress (d939f1e5-f852-52a7-ada2-ca028ab6e45c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ncompress purl2cpe 2026-06-01 10:13:42.056991
pkg:deb/ubuntu/ncompress purl2cpe 2026-06-01 10:13:42.056993
pkg:github/vapier/ncompress purl2cpe 2026-06-01 10:13:42.056995
pkg:gitlab/redhat/ncompress purl2cpe 2026-06-01 10:13:42.056997
pkg:rpm/fedora/ncompress purl2cpe 2026-06-01 10:13:42.056999
pkg:rpm/opensuse/ncompress purl2cpe 2026-06-01 10:13:42.057000
pkg:sourceforge/ncompress purl2cpe 2026-06-01 10:13:42.057002

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-2991 vulnerable 2026-06-08 04:48:31.084071 Details available
ncompress 4.2.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files using (1) zdiff or (2) zcmp, a different vulnerability than CVE-2004-0970.
Published: 2005-09-20T04:00:00.000Z
Updated: 2024-08-07T22:53:29.867Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1413 vulnerable 2026-06-08 04:46:19.841499 Details available
Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries (such as FTP server), may allow remote attackers to execute arbitrary code via a long filename argument.
Published: 2004-10-20T04:00:00.000Z
Updated: 2024-08-08T04:51:08.433Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.