CVE-2008-2107
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.4%
The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit systems, performs a multiplication using values that can produce a zero seed in rare circumstances, which allows context-dependent attackers to predict subsequent values of the rand and mt_rand functions and possibly bypass protection mechanisms that rely on an unknown initial seed.
Produtos afetados
n/a · n/aReferências
http://archives.neohapsis.com/archives/fulldisclosure/2008-05/0103.htmlhttp://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.htmlhttp://secunia.com/advisories/30757http://secunia.com/advisories/30828http://secunia.com/advisories/30967http://secunia.com/advisories/31119http://secunia.com/advisories/31124http://secunia.com/advisories/31200http://secunia.com/advisories/32746http://secunia.com/advisories/35003http://security.gentoo.org/glsa/glsa-200811-05.xmlhttp://securityreason.com/securityalert/3859