Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:cygwin:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Cygwin (28bafdd8-e6d9-5870-ab87-382cf95ea683) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-3323 |
vulnerable | 2026-06-08 04:50:34.110745 |
Details available
setup.exe before 2.573.2.3 in Cygwin does not properly verify the authenticity of packages, which allows remote Cygwin mirror servers or man-in-the-middle attackers to execute arbitrary code via a package list containing the MD5 checksum of a Trojan horse package.
Published: 2008-07-28T17:00:00.000Z
Updated: 2024-08-07T09:37:26.716Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-6181 |
vulnerable | 2026-06-08 04:50:08.112290 |
Details available
Heap-based buffer overflow in cygwin1.dll in Cygwin 1.5.7 and earlier allows context-dependent attackers to execute arbitrary code via a filename with a certain length, as demonstrated by a remote authenticated user who uses the SCP protocol to send a file to the Cygwin machine, and thereby causes scp.exe on this machine to execute, and then overwrite heap memory with characters from the filename. NOTE: it is also reported that a related issue might exist in 1.5.7 through 1.5.19.
Published: 2007-11-30T00:00:00.000Z
Updated: 2024-08-07T15:54:26.961Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.