GCVE - cpe:2.3:a:nrl:opie:2.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:nrl:opie:2.3:*:*:*:*:*:*:*

part: a version: 2.3 update: *

Vendor	Nrl (`100a4913-74ed-5c09-aa03-7092bd923973`)
Product	Opie (`94e01153-bb2d-5b80-8bf8-e651fbc31915`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-2490`	vulnerable	2026-06-08 04:58:07.244165	Details available opielogin.c in opielogin in OPIE 2.4.1-test1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by arranging for an account to already be running its maximum number of processes. Published: 2011-07-27T01:29:00.000Z Updated: 2024-08-06T23:00:34.168Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2011/06/23/5 http://www.openwall.com/lists/oss-security/2011/06/22/6 https://hermes.opensuse.org/messages/10082052 https://bugzilla.novell.com/show_bug.cgi?id=698772 http://www.debian.org/security/2011/dsa-2281	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2489`	vulnerable	2026-06-08 04:58:07.240653	Details available Multiple off-by-one errors in opiesu.c in opiesu in OPIE 2.4.1-test1 and earlier might allow local users to gain privileges via a crafted command line. Published: 2011-07-27T01:29:00.000Z Updated: 2024-08-06T23:00:34.107Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2011/06/23/5 http://www.openwall.com/lists/oss-security/2011/06/22/6 https://hermes.opensuse.org/messages/10082052 https://bugzilla.novell.com/show_bug.cgi?id=698772 https://bugzillafiles.novell.org/attachment.cgi?id=435902	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1938`	vulnerable	2026-06-08 04:54:11.038270	Details available Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long username, as demonstrated by a long USER command to the FreeBSD 8.0 ftpd. Published: 2010-05-28T18:00:00.000Z Updated: 2024-08-07T02:17:13.078Z Open on db.gcve.eu Reference links http://blog.pi3.com.pl/?p=111 http://securityreason.com/securityalert/7450 http://www.securityfocus.com/bid/40403 http://site.pi3.com.pl/adv/libopie-adv.txt http://securitytracker.com/id?1024040	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Opie

Notes

PURL mappings

Vulnerability references

Contribute