Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:userv:1.0.0:*:*:*:*:*:*:*

part: a version: 1.0.0 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductUserv (1ce7809c-ff45-58b4-ba9a-abb91e36cc5c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:gnu/userv purl2cpe 2026-06-01 10:11:55.537962

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2000-0786 vulnerable 2026-06-08 04:45:18.768459 Details available
GNU userv 1.0.0 and earlier does not properly perform file descriptor swapping, which can corrupt the USERV_GROUPS and USERV_GIDS environmental variables and allow local users to bypass some access restrictions.
Published: 2000-10-13T04:00:00.000Z
Updated: 2024-08-08T05:28:41.568Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.