CVE-2008-2107

Executive Summary

Informations
Name	CVE-2008-2107	First vendor Publication	2008-05-07
Vendor	Cve	Last vendor Modification	2012-10-30

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score	7.5	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Low
Cvss Expoit Score	10	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Security Protection

Impacts

Provides unauthorized access : Allows partial confidentiality, integrity, and availability violation; Allows unauthorized disclosure of information; Allows disruption of service.

Detail

The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit systems, performs a multiplication using values that can produce a zero seed in rare circumstances, which allows context-dependent attackers to predict subsequent values of the rand and mt_rand functions and possibly bypass protection mechanisms that rely on an unknown initial seed.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2107

CWE : Common Weakness Enumeration

id	Name
CWE-189	Numeric Errors

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:10644

Oval ID:	oval:org.mitre.oval:def:10644
Title:	The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit systems, performs a multiplication using values that can produce a zero seed in rare circumstances, which allows context-dependent attackers to predict subsequent values of the rand and mt_rand functions and possibly bypass protection mechanisms that rely on an unknown initial seed.
Description:	The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit systems, performs a multiplication using values that can produce a zero seed in rare circumstances, which allows context-dependent attackers to predict subsequent values of the rand and mt_rand functions and possibly bypass protection mechanisms that rely on an unknown initial seed.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-2107	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section php is earlier than 0:4.3.2-48.ent AND php-pgsql is earlier than 0:4.3.2-48.ent AND php-mysql is earlier than 0:4.3.2-48.ent AND php-ldap is earlier than 0:4.3.2-48.ent AND php-imap is earlier than 0:4.3.2-48.ent AND php-odbc is earlier than 0:4.3.2-48.ent AND php-devel is earlier than 0:4.3.2-48.ent OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section php-xmlrpc is earlier than 0:4.3.9-3.22.12 AND php-snmp is earlier than 0:4.3.9-3.22.12 AND php-domxml is earlier than 0:4.3.9-3.22.12 AND php-mysql is earlier than 0:4.3.9-3.22.12 AND php-imap is earlier than 0:4.3.9-3.22.12 AND php-gd is earlier than 0:4.3.9-3.22.12 AND php is earlier than 0:4.3.9-3.22.12 AND php-mbstring is earlier than 0:4.3.9-3.22.12 AND php-pgsql is earlier than 0:4.3.9-3.22.12 AND php-pear is earlier than 0:4.3.9-3.22.12 AND php-ldap is earlier than 0:4.3.9-3.22.12 AND php-odbc is earlier than 0:4.3.9-3.22.12 AND php-ncurses is earlier than 0:4.3.9-3.22.12 AND php-devel is earlier than 0:4.3.9-3.22.12 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section php-bcmath is earlier than 0:5.1.6-20.el5_2.1 AND php-soap is earlier than 0:5.1.6-20.el5_2.1 AND php-common is earlier than 0:5.1.6-20.el5_2.1 AND php-mysql is earlier than 0:5.1.6-20.el5_2.1 AND php-imap is earlier than 0:5.1.6-20.el5_2.1 AND php-gd is earlier than 0:5.1.6-20.el5_2.1 AND php is earlier than 0:5.1.6-20.el5_2.1 AND php-mbstring is earlier than 0:5.1.6-20.el5_2.1 AND php-pgsql is earlier than 0:5.1.6-20.el5_2.1 AND php-xml is earlier than 0:5.1.6-20.el5_2.1 AND php-ldap is earlier than 0:5.1.6-20.el5_2.1 AND php-odbc is earlier than 0:5.1.6-20.el5_2.1 AND php-ncurses is earlier than 0:5.1.6-20.el5_2.1 AND php-devel is earlier than 0:5.1.6-20.el5_2.1 AND php-xmlrpc is earlier than 0:5.1.6-20.el5_2.1 AND php-snmp is earlier than 0:5.1.6-20.el5_2.1 AND php-pdo is earlier than 0:5.1.6-20.el5_2.1 AND php-dba is earlier than 0:5.1.6-20.el5_2.1 AND php-cli is earlier than 0:5.1.6-20.el5_2.1

CPE : Common Platform Enumeration

Type	Description	Count
Application	Php Php cpe:/a:php:php:5.2.4 cpe:/a:php:php:5.2.3 cpe:/a:php:php:5.2.2 cpe:/a:php:php:5.2.1 cpe:/a:php:php:5.2.0 cpe:/a:php:php:5.1.6 cpe:/a:php:php:5.1.5 cpe:/a:php:php:5.1.4 cpe:/a:php:php:5.1.3 cpe:/a:php:php:5.1.2 cpe:/a:php:php:5.1.1 cpe:/a:php:php:5.1.0 cpe:/a:php:php:5.0.5 cpe:/a:php:php:5.0.4 cpe:/a:php:php:5.0.3 cpe:/a:php:php:5.0.2 cpe:/a:php:php:5.0.1 cpe:/a:php:php:5.0.0:rc2 cpe:/a:php:php:5.0.0:beta1 cpe:/a:php:php:5.0.0:rc3 cpe:/a:php:php:5.0.0:beta2 cpe:/a:php:php:5.0.0:beta3 cpe:/a:php:php:5.0.0:rc1 cpe:/a:php:php:5 cpe:/a:php:php:4.4.7	25

Open Source Vulnerability Database (OSVDB)

id	Description
44909	PHP GENERATE_SEED Macro Seed Prediction Weakness Random Functions Based Prote...

Internal Sources (Detail)

Source	Url
BUGTRAQ	http://www.securityfocus.com/archive/1/archive/1/491683/100/0/threaded
DEBIAN	http://www.debian.org/security/2009/dsa-1789
FEDORA	https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00773.html https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00779.html
FULLDISC	http://archives.neohapsis.com/archives/fulldisclosure/2008-05/0103.html
GENTOO	http://security.gentoo.org/glsa/glsa-200811-05.xml
MANDRIVA	http://www.mandriva.com/security/advisories?name=MDVSA-2008:125 http://www.mandriva.com/security/advisories?name=MDVSA-2008:126 http://www.mandriva.com/security/advisories?name=MDVSA-2008:127 http://www.mandriva.com/security/advisories?name=MDVSA-2008:128 http://www.mandriva.com/security/advisories?name=MDVSA-2008:129 http://www.mandriva.com/security/advisories?name=MDVSA-2008:130
MISC	http://www.sektioneins.de/advisories/SE-2008-02.txt
REDHAT	http://www.redhat.com/support/errata/RHSA-2008-0505.html http://www.redhat.com/support/errata/RHSA-2008-0544.html http://www.redhat.com/support/errata/RHSA-2008-0545.html http://www.redhat.com/support/errata/RHSA-2008-0546.html http://www.redhat.com/support/errata/RHSA-2008-0582.html
SECUNIA	http://secunia.com/advisories/30757 http://secunia.com/advisories/30828 http://secunia.com/advisories/30967 http://secunia.com/advisories/31119 http://secunia.com/advisories/31124 http://secunia.com/advisories/31200 http://secunia.com/advisories/32746 http://secunia.com/advisories/35003
SREASON	http://securityreason.com/securityalert/3859
SUSE	http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html
UBUNTU	http://www.ubuntu.com/usn/usn-628-1
XF	http://xforce.iss.net/xforce/xfdb/42226 http://xforce.iss.net/xforce/xfdb/42284

Alert History

If you want to see full details history, please login or register.

Date	Informations
2013-05-11 00:16:25	Multiple Updates
2012-11-07 00:17:06	Multiple Updates

Type	Count
Oval ID(s)	1
CPE ID(s)	25
osvdb(s)	1

Related	Severity
USN-628-1	(Critical)
RHSA-2008:0582	(Critical)
RHSA-2008:0546	(Critical)
RHSA-2008:0545	(Critical)
RHSA-2008:0544	(Critical)
RHSA-2008:0505	(Critical)
MDVSA-2008:128	(Critical)
MDVSA-2008:127	(Critical)
MDVSA-2008:126	(Critical)
MDVSA-2008:125	(Critical)
GLSA-200811-05	(Critical)
DSA-1789	(Critical)
MDVSA-2008:130	(High)
MDVSA-2008:129	(High)