EUVD-2008-3311

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Cygwin setup.exe prior to version 2.573.2.3 lacks package authenticity verification vulnerability

Reporter	Title	Published	Views	Family All 7
CVE	CVE-2008-3323	28 Jul 200817:00	–	cve
Cvelist	CVE-2008-3323	28 Jul 200817:00	–	cvelist
NVD	CVE-2008-3323	28 Jul 200817:41	–	nvd
Prion	Design/Logic Flaw	28 Jul 200817:41	–	prion
securityvulns	SECOBJADV-2008-02: Cygwin Installation and Update Process can be Subverted Vulnerability	26 Jul 200800:00	–	securityvulns
seebug.org	Cygwin setup.exe安装及升级过程数据验证漏洞	28 Jul 200800:00	–	seebug
seebug.org	Cygwin包处理存在安全漏洞	11 Aug 200800:00	–	seebug

[
  {
    "enisaIdVendor": [
      {
        "id": "cd6eb251-a0f8-3a2a-ba92-3f4b7c0e61de",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "23bd066b-efbe-3c51-a702-f0427e5ab1a2",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
vupen	www.vupen.com/english/advisories/2008/2321
security-objectives	www.security-objectives.com/advisories/SECOBJADV-2008-02.txt
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/44047
securityfocus	www.securityfocus.com/archive/1/494756/100/0/threaded
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
securityfocus	www.securityfocus.com/bid/30375
securityreason	www.securityreason.com/securityalert/4051
cygwin	www.cygwin.com/ml/cygwin-announce/2008-08/msg00001.html
secunia	www.secunia.com/advisories/31271
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.4Medium risk

Vulners AI Score6.4

CVSS 27.6

EPSS0.01227