GCVE - cpe:2.3:o:netbsd:netbsd:6.1.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:netbsd:netbsd:6.1.4:*:*:*:*:*:*:*

part: o version: 6.1.4 update: *

Vendor	Netbsd (`d97e796d-00dc-5b79-b428-0d0c6adaeef6`)
Product	Netbsd (`ca6879a6-363f-5749-9139-ea8a36b24a66`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:netbsd/netbsd`	purl2cpe	2026-06-01 10:15:23.715036

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-6253`	vulnerable	2026-06-08 05:07:59.277276	Details available mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or append data to arbitrary files on the target system via a symlink attack on the user mailbox. Published: 2017-01-20T15:00:00.000Z Updated: 2024-08-06T01:22:20.800Z Open on db.gcve.eu Reference links http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2016-006.txt.asc http://packetstormsecurity.com/files/138021/NetBSD-mail.local-8-Local-Root.html https://www.exploit-db.com/exploits/40141/ https://www.exploit-db.com/exploits/40385/ http://www.securityfocus.com/bid/92101	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-8212`	vulnerable	2026-06-08 05:07:03.307246	Details available CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows remote attackers to execute arbitrary code via crafted arguments, which are handled by a non-CGI aware program. Published: 2017-01-19T20:00:00.000Z Updated: 2024-08-06T08:13:32.049Z Open on db.gcve.eu Reference links http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2016-005.txt.asc http://www.securitytracker.com/id/1035673	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8517`	vulnerable	2026-06-08 05:06:09.067433	Details available The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 through 6.0.6, and 6.1 through 6.1.5 allows remote attackers to execute arbitrary commands via a \| (pipe) character at the end of an HTTP redirect. Published: 2014-11-17T16:00:00.000Z Updated: 2024-08-06T13:18:48.531Z Open on db.gcve.eu Reference links http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-013.txt.asc http://secunia.com/advisories/62028 https://www.exploit-db.com/exploits/43112/ http://seclists.org/oss-sec/2014/q4/464 http://support.apple.com/HT204244	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3566`	vulnerable	2026-06-08 05:05:33.528735	Details available The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue. Published: 2014-10-15T00:00:00.000Z Updated: 2026-05-28T17:35:01.304Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=142103967620673&w=2 http://aix.software.ibm.com/aix/efixes/security/openssl_advisory11.asc http://www.securitytracker.com/id/1031090 http://blog.nodejs.org/2014/10/23/node-v0-10-33-stable/ http://rhn.redhat.com/errata/RHSA-2014-1880.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.