Approved changes feed: RSS · Atom

cpe:2.3:a:ipcop:ipcop:1.4.6:*:*:*:*:*:*:*

part: a version: 1.4.6 update: *

VendorIpcop (1f52a0a6-ceb9-5277-b282-e831b9349597)
ProductIpcop (db52b3e6-6f5e-5981-b3fc-f39b782145c7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:sourceforge/ipcop purl2cpe 2026-06-01 10:16:09.834382

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-4660 vulnerable 2026-06-08 04:48:44.629964 Details available
Race condition in IPCop (aka IPCop Firewall) before 1.4.10 might allow local users to overwrite system configuration files and gain privileges by replacing a backup archive during the time window when the archive is owned by "nobody" but not yet encrypted, then executing ipcoprscfg to restore from this backup.
Published: 2006-01-16T21:00:00.000Z
Updated: 2024-09-17T00:31:41.665Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4659 vulnerable 2026-06-08 04:48:44.628150 Details available
IPCop (aka IPCop Firewall) before 1.4.10 has world-readable permissions for the backup.key file, which might allow local users to overwrite system configuration files and gain privileges by creating a malicious encrypted backup archive owned by "nobody", then executing ipcoprscfg to restore from this backup.
Published: 2006-01-16T21:00:00.000Z
Updated: 2024-08-07T23:53:28.519Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.