Approved changes feed: RSS · Atom

cpe:2.3:o:netbsd:netbsd:6.0:*:*:*:*:*:*:*

part: o version: 6.0 update: *

VendorNetbsd (d97e796d-00dc-5b79-b428-0d0c6adaeef6)
ProductNetbsd (ca6879a6-363f-5749-9139-ea8a36b24a66)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:netbsd/netbsd purl2cpe 2026-06-01 10:15:23.715020

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-6253 vulnerable 2026-06-08 05:07:59.271207 Details available
mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or append data to arbitrary files on the target system via a symlink attack on the user mailbox.
Published: 2017-01-20T15:00:00.000Z
Updated: 2024-08-06T01:22:20.800Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8212 vulnerable 2026-06-08 05:07:03.301493 Details available
CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows remote attackers to execute arbitrary code via crafted arguments, which are handled by a non-CGI aware program.
Published: 2017-01-19T20:00:00.000Z
Updated: 2024-08-06T08:13:32.049Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8517 vulnerable 2026-06-08 05:06:09.062011 Details available
The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 through 6.0.6, and 6.1 through 6.1.5 allows remote attackers to execute arbitrary commands via a | (pipe) character at the end of an HTTP redirect.
Published: 2014-11-17T16:00:00.000Z
Updated: 2024-08-06T13:18:48.531Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5015 vulnerable 2026-06-08 05:05:46.630018 Details available
bozotic HTTP server (aka bozohttpd) before 20140708, as used in NetBSD, truncates paths when checking .htpasswd restrictions, which allows remote attackers to bypass the HTTP authentication scheme and access restrictions via a long path.
Published: 2014-07-24T14:00:00.000Z
Updated: 2024-08-06T11:34:37.205Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3566 vulnerable 2026-06-08 05:05:33.522572 Details available
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
Published: 2014-10-15T00:00:00.000Z
Updated: 2026-05-28T17:35:01.304Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.