PT-2008-5410 · Php · Php

Publicado 2008-09-18 · Atualizado 2018-10-30 · CVE-2008-4107

Mitre

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

The (1) rand and (2) mt rand functions in PHP 5.2.6 do not produce cryptographically strong random numbers, which allows attackers to leverage exposures in products that rely on these functions for security-relevant functionality, as demonstrated by the password-reset functionality in Joomla! 1.5.x and WordPress before 2.6.2, a different vulnerability than CVE-2008-2107, CVE-2008-2108, and CVE-2008-4102.

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2008-4107

Produtos afetados

Php

Referências · 21

• http://securityfocus.com/archive/1/496287/100/0/threaded · Nota
• http://secunia.com/advisories/31737 · Aviso do Fabricante
• http://securityfocus.com/archive/1/496237/100/0/threaded · Nota
• http://securityreason.com/securityalert/4271 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-4107 · Nota de Segurança
• http://securitytracker.com/id?1020869 · Nota
• http://osvdb.org/48700 · Nota
• http://secunia.com/advisories/31870 · Aviso do Fabricante
• http://sektioneins.de/advisories/SE-2008-05.txt · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45956 · Nota
• http://sektioneins.de/advisories/SE-2008-04.txt · Nota
• http://securityfocus.com/bid/31115 · Nota
• http://suspekt.org/2008/08/17/mt_srand-and-not-so-random-numbers · Nota
• https://redhat.com/archives/fedora-package-announce/2008-September/msg00607.html · Aviso do Fabricante
• http://marc.info/?l=oss-security&m=122152830017099&w=2 · Nota