Approved changes feed: RSS · Atom
cpe:2.3:a:debian:linux:unknown:unknown:etch:*:*:*:*:*
part: a version: unknown update: unknown
| Vendor | Debian (4199fb5b-36f6-5ceb-83d5-855460345e36) |
|---|---|
| Product | Linux (b9df7f80-8d66-5d84-bfa7-bb30e4cb46a5) |
| Edition | etch |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-4126 |
not_vulnerable | 2026-06-08 04:50:37.924908 |
Details available
PyDNS (aka python-dns) before 2.3.1-5 in Debian GNU/Linux does not use random source ports for DNS requests and does not use random transaction IDs for DNS retries, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4099.
Published: 2008-09-18T17:47:00.000Z
Updated: 2024-09-16T19:20:50.961Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-4109 |
not_vulnerable | 2026-06-08 04:50:37.868076 |
Details available
A certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and lenny; and on other distributions such as SUSE uses functions that are not async-signal-safe in the signal handler for login timeouts, which allows remote attackers to cause a denial of service (connection slot exhaustion) via multiple login attempts. NOTE: this issue exists because of an incorrect fix for CVE-2006-5051.
Published: 2008-09-17T18:06:00.000Z
Updated: 2024-08-07T10:00:42.727Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-4099 |
not_vulnerable | 2026-06-08 04:50:37.809625 |
Details available
PyDNS (aka python-dns) before 2.3.1-4 in Debian GNU/Linux does not use random source ports or transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.
Published: 2008-09-18T17:47:00.000Z
Updated: 2024-08-07T10:00:42.838Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.