Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:cfengine:1.5.3-4:*:*:*:*:*:*:*

part: a version: 1.5.3-4 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductCfengine (55e8a25d-d543-51e9-b2d6-d7db78c7ef06)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/cfengine3 purl2cpe 2026-06-01 10:11:54.083611
pkg:deb/ubuntu/cfengine3 purl2cpe 2026-06-01 10:11:54.083612
pkg:github/cfengine/core purl2cpe 2026-06-01 10:11:54.083614
pkg:gnu/cfengine purl2cpe 2026-06-01 10:11:54.083615
pkg:rpm/opensuse/cfengine purl2cpe 2026-06-01 10:11:54.083616

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-2960 vulnerable 2026-06-08 04:48:30.978657 Details available
cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in, a different vulnerability than CVE-2005-3137.
Published: 2005-10-05T04:00:00.000Z
Updated: 2024-08-07T22:53:29.987Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0947 vulnerable 2026-06-08 04:45:19.007865 Details available
Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command.
Published: 2001-01-22T05:00:00.000Z
Updated: 2024-08-08T05:37:31.982Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.