PT-2008-4499 · Php+1 · Php+1

Jessica Hope · Published 2008-07-08 · Updated 2012-11-27 · CVE-2008-3072

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Simple Machines Forum (SMF) versions 1.1.x before 1.1.5 Simple Machines Forum (SMF) versions 1.0.x before 1.0.13

Description: The issue is related to the improper seeding of the random number generator in Simple Machines Forum (SMF) when running in PHP before 4.2.0. This has an unknown impact and attack vectors.

Recommendations: For Simple Machines Forum (SMF) versions 1.1.x before 1.1.5, update to version 1.1.5 or later. For Simple Machines Forum (SMF) versions 1.0.x before 1.0.13, update to version 1.0.13 or later.

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2008-3072

Affected Products

Php

Simple Machines Forum

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2008-3072 · Security Note
• http://simplemachines.org/community/index.php?P=c3696c2022b54fa50c5f341bf5710aa3&topic=236816.0 · Note
• http://secunia.com/advisories/30955 · Note