Approved changes feed: RSS · Atom

cpe:2.3:a:debian:unp:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDebian (4199fb5b-36f6-5ceb-83d5-855460345e36)
ProductUnp (67367571-2fc4-5f23-a64f-23f80d282624)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/unp purl2cpe 2026-06-01 10:17:14.987825
pkg:deb/ubuntu/unp purl2cpe 2026-06-01 10:17:14.987827

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-6610 vulnerable 2026-06-08 04:50:09.209480 Details available
unp 1.0.12, and other versions before 1.0.14, does not properly escape file names, which might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename argument. NOTE: this might only be a vulnerability when unp is invoked by a third party product.
Published: 2008-01-03T20:00:00.000Z
Updated: 2024-08-07T16:11:06.083Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.