Approved changes feed: RSS · Atom
cpe:2.3:a:ipcop:ipcop:1.4.1:*:*:*:*:*:*:*part: a version: 1.4.1 update: *
| Vendor | Ipcop (1f52a0a6-ceb9-5277-b282-e831b9349597) |
|---|---|
| Product | Ipcop (db52b3e6-6f5e-5981-b3fc-f39b782145c7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:sourceforge/ipcop |
purl2cpe | 2026-06-01 10:16:09.830543 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2005-4660 |
vulnerable | 2026-06-08 04:48:44.629882 |
Details available
Race condition in IPCop (aka IPCop Firewall) before 1.4.10 might allow local users to overwrite system configuration files and gain privileges by replacing a backup archive during the time window when the archive is owned by "nobody" but not yet encrypted, then executing ipcoprscfg to restore from this backup.
Published: 2006-01-16T21:00:00.000Z
Updated: 2024-09-17T00:31:41.665Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4659 |
vulnerable | 2026-06-08 04:48:44.625443 |
Details available
IPCop (aka IPCop Firewall) before 1.4.10 has world-readable permissions for the backup.key file, which might allow local users to overwrite system configuration files and gain privileges by creating a malicious encrypted backup archive owned by "nobody", then executing ipcoprscfg to restore from this backup.
Published: 2006-01-16T21:00:00.000Z
Updated: 2024-08-07T23:53:28.519Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1210 |
vulnerable | 2026-06-08 04:47:53.343558 |
Details available
Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the (1) url or (2) part variables.
Published: 2004-12-15T05:00:00.000Z
Updated: 2024-08-08T00:46:12.377Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.