NVD

Id
2041  
Name
CVE-2008-2107  
Description
The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit systems, performs a multiplication using values that can produce a zero seed in rare circumstances, which allows context-dependent attackers to predict subsequent values of the rand and mt_rand functions and possibly bypass protection mechanisms that rely on an unknown initial seed.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-05-07  
Modified Date
2012-10-30  
Seq
2008-2107  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
13109 2041 CVE-2008-2107 20080506 Advisory SE-2008-02: PHP GENERATE_SEED() Weak Random Number Seed Vulnerability  View
13110 2041 CVE-2008-2107 SUSE-SR:2008:014  View
13111 2041 CVE-2008-2107 oval:org.mitre.oval:def:10644  View
13112 2041 CVE-2008-2107 GLSA-200811-05  View
13113 2041 CVE-2008-2107 3859  View
13114 2041 CVE-2008-2107 DSA-1789  View
13115 2041 CVE-2008-2107 MDVSA-2008:125  View
13116 2041 CVE-2008-2107 MDVSA-2008:126  View
13117 2041 CVE-2008-2107 MDVSA-2008:127  View
13118 2041 CVE-2008-2107 MDVSA-2008:128  View
13119 2041 CVE-2008-2107 MDVSA-2008:129  View
13120 2041 CVE-2008-2107 MDVSA-2008:130  View
13121 2041 CVE-2008-2107 RHSA-2008:0505  View
13122 2041 CVE-2008-2107 RHSA-2008:0544  View
13123 2041 CVE-2008-2107 RHSA-2008:0545  View
13124 2041 CVE-2008-2107 RHSA-2008:0546  View
13125 2041 CVE-2008-2107 RHSA-2008:0582  View
13126 2041 CVE-2008-2107 20080506 Advisory SE-2008-02: PHP GENERATE_SEED() Weak Random Number Seed Vulnerability  View
13127 2041 CVE-2008-2107 http://www.sektioneins.de/advisories/SE-2008-02.txt  View
13128 2041 CVE-2008-2107 USN-628-1  View
13129 2041 CVE-2008-2107 php-generateseed-weak-security(42226)  View
13130 2041 CVE-2008-2107 php-generateseed-security-bypass(42284)  View
13131 2041 CVE-2008-2107 FEDORA-2008-3864  View
13132 2041 CVE-2008-2107 FEDORA-2008-3606  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46022 JVNDB-2008-001332 PHP の rand() 関数および mt_rand() 関数における制限を回避される脆弱性 32 ビットシステムで動作する、PHP の GENERATE_SEED マクロには、まれな状況において、ゼロの値で乗算を行うため、rand() 関数や mt_rand() 関数のその後の値を予測される脆弱性が存在します。 CVE-2008-2107 32220 CVE-2008-2107 2041 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001332.html 2008-05-07 2008-11-26 View