GCVE - cpe:2.3:o:netbsd:netbsd:4.0.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:netbsd:netbsd:4.0.1:*:*:*:*:*:*:*

part: o version: 4.0.1 update: *

Vendor	Netbsd (`d97e796d-00dc-5b79-b428-0d0c6adaeef6`)
Product	Netbsd (`ca6879a6-363f-5749-9139-ea8a36b24a66`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:netbsd/netbsd`	purl2cpe	2026-06-01 10:15:23.709260

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-2530`	vulnerable	2026-06-08 04:55:08.474452	Details available Multiple integer signedness errors in smb_subr.c in the netsmb module in the kernel in NetBSD 5.0.2 and earlier, FreeBSD, and Apple Mac OS X allow local users to cause a denial of service (panic) via a negative size value in a /dev/nsmb ioctl operation, as demonstrated by a (1) SMBIOC_LOOKUP or (2) SMBIOC_OPENSESSION ioctl call. Published: 2010-09-29T16:00:00.000Z Updated: 2024-09-16T23:45:53.259Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2010/07/12/6 http://www.securityfocus.com/bid/41557 http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/netsmb/smb_subr.c.diff?r1=1.34&r2=1.35&only_with_tag=MAIN&f=h http://www.openwall.com/lists/oss-security/2010/07/16/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2793`	vulnerable	2026-06-08 04:51:30.438438	Details available The kernel in NetBSD, probably 5.0.1 and earlier, on x86 platforms does not properly handle a pre-commit failure of the iret instruction, which might allow local users to gain privileges via vectors related to a tempEIP pseudocode variable that is outside of the code-segment limits. Published: 2009-09-18T22:00:00.000Z Updated: 2024-08-07T06:07:35.917Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/506531/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2483`	vulnerable	2026-06-08 04:51:28.846187	Details available libprop/prop_object.c in proplib in NetBSD 4.0 and 4.0.1 allows local users to cause a denial of service (NULL pointer dereference and kernel panic) via a malformed externalized plist (XML form) containing an undefined element. Published: 2009-07-16T16:00:00.000Z Updated: 2024-08-07T05:52:14.835Z Open on db.gcve.eu Reference links http://secunia.com/advisories/35556 http://www.securityfocus.com/bid/35466 https://exchange.xforce.ibmcloud.com/vulnerabilities/51311 ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-003.txt.asc http://osvdb.org/55285	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2482`	vulnerable	2026-06-08 04:51:28.842307	Details available The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are not in the wheel group. Published: 2009-07-16T16:00:00.000Z Updated: 2024-08-07T05:52:15.081Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1022432 ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-004.txt.asc http://secunia.com/advisories/35553 http://osvdb.org/55284 http://www.securityfocus.com/bid/35465	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.