Approved changes feed: RSS · Atom

cpe:2.3:a:gpsdrive:gpsdrive:1.33:*:*:*:*:*:*:*

part: a version: 1.33 update: *

VendorGpsdrive (9be71189-9f68-57d1-8310-5f210c8fad3c)
ProductGpsdrive (f0da8170-d9e0-5164-8d24-89c1778e4774)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:sourceforge/gpsdrive purl2cpe 2026-06-01 10:15:33.387397

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-5704 vulnerable 2026-06-08 04:50:52.557260 Details available
src/unit_test.c in gpsdrive (aka gpsdrive-scripts) 2.10~pre4 might allow local users to overwrite arbitrary files via a symlink attack on the /tmp/gpsdrive-unit-test/proc temporary file, a different vector than CVE-2008-4959 and CVE-2008-5380.
Published: 2008-12-22T15:00:00.000Z
Updated: 2024-09-16T20:06:30.385Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5703 vulnerable 2026-06-08 04:50:52.556776 Details available
gpsdrive (aka gpsdrive-scripts) 2.10~pre4 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/.smswatch or (b) /tmp/gpsdrivepos temporary file, related to (1) examples/gpssmswatch and (2) src/splash.c, different vectors than CVE-2008-4959 and CVE-2008-5380.
Published: 2008-12-22T15:00:00.000Z
Updated: 2024-08-07T11:04:43.800Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.