GCVE - cpe:2.3:a:burp_project:burp:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:burp_project:burp:*:*:*:*:*:*:*:*

part: a version: * update: *

Notes

Imported from purl2cpe mapping

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-18285`	vulnerable	2026-06-08 05:09:10.738065	Details available The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and write access to arbitrary files by leveraging access to a certain account for a burp-server.conf change. Published: 2018-06-04T06:00:00.000Z Updated: 2024-08-05T21:20:49.985Z Open on db.gcve.eu Reference links https://security.gentoo.org/glsa/201806-03 https://bugs.gentoo.org/641842 https://security.gentoo.org/glsa/201904-05	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-18284`	vulnerable	2026-06-08 05:09:10.737591	Details available The Gentoo app-backup/burp package before 2.1.32 sets the ownership of the PID file directory to the burp account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL. Published: 2018-06-04T06:00:00.000Z Updated: 2024-08-05T21:20:49.706Z Open on db.gcve.eu Reference links https://security.gentoo.org/glsa/201806-03 https://bugs.gentoo.org/628770	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.