NVD

Id
3965  
Name
CVE-2008-4107  
Description
The (1) rand and (2) mt_rand functions in PHP 5.2.6 do not produce cryptographically strong random numbers, which allows attackers to leverage exposures in products that rely on these functions for security-relevant functionality, as demonstrated by the password-reset functionality in Joomla! 1.5.x and WordPress before 2.6.2, a different vulnerability than CVE-2008-2107, CVE-2008-2108, and CVE-2008-4102.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-09-18  
Modified Date
2012-10-29  
Seq
2008-4107  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
25261 3965 CVE-2008-4107 [oss-security] 20080916 Re: CVE request: wordpress < 2.6.2  View
25262 3965 CVE-2008-4107 4271  View
25263 3965 CVE-2008-4107 1020869  View
25264 3965 CVE-2008-4107 http://wordpress.org/development/2008/09/wordpress-262/  View
25265 3965 CVE-2008-4107 [oss-security] 20080911 CVE request: wordpress < 2.6.2  View
25266 3965 CVE-2008-4107 20080911 Advisory 04/2008: Joomla Weak Random Password Reset Token Vulnerability  View
25267 3965 CVE-2008-4107 20080911 Advisory 05/2008: Wordpress user_login Column SQL Truncation Vulnerability  View
25268 3965 CVE-2008-4107 31115  View
25269 3965 CVE-2008-4107 http://www.sektioneins.de/advisories/SE-2008-02.txt  View
25270 3965 CVE-2008-4107 http://www.sektioneins.de/advisories/SE-2008-04.txt  View
25271 3965 CVE-2008-4107 http://www.sektioneins.de/advisories/SE-2008-05.txt  View
25272 3965 CVE-2008-4107 http://www.suspekt.org/2008/08/17/mt_srand-and-not-so-random-numbers/  View
25273 3965 CVE-2008-4107 ADV-2008-2553  View
25274 3965 CVE-2008-4107 php-rand-mtrand-weak-security(45956)  View
25275 3965 CVE-2008-4107 FEDORA-2008-7760  View
25276 3965 CVE-2008-4107 FEDORA-2008-7902  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49548 JVNDB-2008-004858 PHP の rand などの関数におけるセキュリティの問題を悪用される脆弱性 PHP の (1) rand および (2) mt_rand 関数は、暗号上強力な乱数を作成しないため、セキュリティの問題を悪用される脆弱性が存在します。 CVE-2008-4107 34220 CVE-2008-4107 3965 5.1 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004858.html 2008-09-11 2012-12-19 View