NVD

Id
1431  
Name
CVE-2008-1484  
Description
The password reset feature in PunBB 1.2.16 and earlier uses predictable random numbers based on the system time, which allows remote authenticated users to determine the new password via a brute force attack on a seed that is based on the approximate creation time of the targeted account. NOTE: this issue might be related to CVE-2006-5737.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2008-03-24  
Modified Date
2009-09-19  
Seq
2008-1484  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
9350 1431 CVE-2008-1484 http://punbb.org/download/changelogs/1.2.16_to_1.2.17.txt  View
9351 1431 CVE-2008-1484 http://punbb.org/forums/viewtopic.php?id=18460  View
9352 1431 CVE-2008-1484 http://sektioneins.de/advisories/SE-2008-01.txt  View
9353 1431 CVE-2008-1484 5165  View
9354 1431 CVE-2008-1484 20080220 Advisory SE-2008-01: PunBB Blind Password Recovery Vulnerability  View
9355 1431 CVE-2008-1484 27908  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50304 JVNDB-2008-005614 PunBB のパスワードリセット機能における新規パスワードを特定される脆弱性 PunBB のパスワードリセット機能は、システム時刻に基づいて予測可能な乱数を使用するため、新規パスワードを特定される脆弱性が存在します。 CVE-2008-1484 31597 CVE-2008-1484 1431 3.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005614.html 2008-02-20 2012-12-20 View