GCVE - cpe:2.3:a:gnu:gnump3d:2.9.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:gnump3d:2.9.2:*:*:*:*:*:*:*

part: a version: 2.9.2 update: *

Vendor	Gnu (`575dd98a-a14a-5d9e-a2eb-97d38d86fcb9`)
Product	Gnump3D (`081775ef-97ce-5297-a01a-50530936896a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/eherot/gnump3d`	purl2cpe	2026-06-01 10:11:55.693668
`pkg:gnu/gnump3d`	purl2cpe	2026-06-01 10:11:55.693669
`pkg:rpm/opensuse/gnump3d`	purl2cpe	2026-06-01 10:11:55.693670

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2005-3425`	vulnerable	2026-06-08 04:48:40.728040	Details available Cross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2005-3424. Published: 2005-11-01T22:00:00.000Z Updated: 2024-08-07T23:10:08.458Z Open on db.gcve.eu Reference links http://www.novell.com/linux/security/advisories/2005_28_sr.html http://securitytracker.com/id?1015118 http://secunia.com/advisories/17831 http://www.gnu.org/software/gnump3d/ChangeLog http://secunia.com/advisories/17449	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3424`	vulnerable	2026-06-08 04:48:40.727345	Details available Cross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.5 allows remote attackers to inject arbitrary web script or HTML via 404 error pages, a different vulnerability than CVE-2005-3425. Published: 2005-11-01T22:00:00.000Z Updated: 2024-08-07T23:10:08.574Z Open on db.gcve.eu Reference links http://www.novell.com/linux/security/advisories/2005_28_sr.html http://www.osvdb.org/20359 http://www.gnu.org/software/gnump3d/ChangeLog http://lists.gnu.org/archive/html/gnump3d-users/2005-10/msg00013.html http://www.vupen.com/english/advisories/2005/2242	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3355`	vulnerable	2026-06-08 04:48:40.441235	Details available Directory traversal vulnerability in GNU Gnump3d before 2.9.8 has unknown impact via "CGI parameters, and cookie values". Published: 2005-11-18T22:00:00.000Z Updated: 2024-08-07T23:10:08.605Z Open on db.gcve.eu Reference links http://www.novell.com/linux/security/advisories/2005_28_sr.html http://secunia.com/advisories/17647 http://www.vupen.com/english/advisories/2005/2489 http://www.gentoo.org/security/en/glsa/glsa-200511-16.xml http://www.gnu.org/software/gnump3d/ChangeLog	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3349`	vulnerable	2026-06-08 04:48:40.411317	Details available GNU Gnump3d before 2.9.8 allows local users to modify or delete arbitrary files via a symlink attack on the index.lok temporary file. Published: 2005-11-18T22:00:00.000Z Updated: 2024-08-07T23:10:07.773Z Open on db.gcve.eu Reference links http://www.novell.com/linux/security/advisories/2005_28_sr.html http://www.securityfocus.com/bid/15497 http://secunia.com/advisories/17647 http://www.vupen.com/english/advisories/2005/2489 http://www.gnu.org/software/gnump3d/attacks.html#temporary-files	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3123`	vulnerable	2026-06-08 04:48:39.651396	Details available Directory traversal vulnerability in GNUMP3D before 2.9.6 allows remote attackers to read arbitrary files via crafted sequences such as "/.//..//////././", which is collapsed into "/.././" after ".." and "//" sequences are removed. Published: 2005-10-30T20:00:00.000Z Updated: 2024-08-07T23:01:57.835Z Open on db.gcve.eu Reference links http://www.novell.com/linux/security/advisories/2005_28_sr.html http://www.osvdb.org/20360 http://securityreason.com/securityalert/127 http://securitytracker.com/id?1015118 http://secunia.com/advisories/17559	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.