CVE

Id
26085  
CVE No.
CVE-2007-2728  
Status
Candidate  
Description
The soap extension in PHP calls php_rand_r with an uninitialized seed variable, which has unknown impact and attack vectors, a related issue to the mcrypt_create_iv issue covered by CVE-2007-2727.  
Phase
Assigned (20070516)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
262406 26085 CVE-2007-2728 MISC:http://blog.php-security.org/archives/80-Watching-the-PHP-CVS.html  View
262407 26085 CVE-2007-2728 MANDRIVA:MDKSA-2007:187  View
262408 26085 CVE-2007-2728 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2007:187  View
262409 26085 CVE-2007-2728 SUSE:SUSE-SR:2007:015  View
262410 26085 CVE-2007-2728 URL:http://www.novell.com/linux/security/advisories/2007_15_sr.html  View
262411 26085 CVE-2007-2728 UBUNTU:USN-485-1  View
262412 26085 CVE-2007-2728 URL:http://www.ubuntu.com/usn/usn-485-1  View
262413 26085 CVE-2007-2728 OSVDB:36086  View
262414 26085 CVE-2007-2728 URL:http://osvdb.org/36086  View
262415 26085 CVE-2007-2728 VUPEN:ADV-2007-1839  View
262416 26085 CVE-2007-2728 URL:http://www.vupen.com/english/advisories/2007/1839  View
262417 26085 CVE-2007-2728 SECUNIA:25306  View
262418 26085 CVE-2007-2728 URL:http://secunia.com/advisories/25306  View
262419 26085 CVE-2007-2728 SECUNIA:26102  View
262420 26085 CVE-2007-2728 URL:http://secunia.com/advisories/26102  View
262421 26085 CVE-2007-2728 SECUNIA:26895  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53344 JVNDB-2007-002036 Check Point ZoneAlarm Pro における権限を取得される脆弱性 Check Point ZoneAlarm Pro は、NT カーネルの特定の Microsoft Windows API 機能に対してプロセス識別子の同値性を適切にテストしないため、Microsoft Windows API 機能が呼び出される、ファイアーウォールを回避されるまたは権限を取得される脆弱性が存在します。 CVE-2007-2730 26085 7.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002036.html  View