Approved changes feed: RSS · Atom

cpe:2.3:a:gentoo:nullmailer:1.11:*:*:*:*:*:*:*

part: a version: 1.11 update: *

VendorGentoo (7fa277de-5a05-5db1-a5d1-2f4db074c494)
ProductNullmailer (23e1fff2-72b9-58ad-952a-c6e6b769f52d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/nullmailer purl2cpe 2026-06-01 10:12:48.506210
pkg:deb/ubuntu/nullmailer purl2cpe 2026-06-01 10:12:48.506213
pkg:github/bruceg/nullmailer purl2cpe 2026-06-01 10:12:48.506216
pkg:rpm/opensuse/nullmailer purl2cpe 2026-06-01 10:12:48.506218

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-4223 vulnerable 2026-06-03 14:33:10.327527 Details available
The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer/remotes, which allows local users to obtain SMTP authentication credentials by reading the file.
Published: 2014-05-23T14:00:00.000Z
Updated: 2024-08-06T16:38:01.736Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.