Lucene search

PRIOn knowledge basePRION:CVE-2009-0255

HistoryJan 22, 2009 - 11:30 p.m.

Code injection

2009-01-2223:30:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.024 Low

EPSS

Percentile

90.0%

JSON

The System extension Install tool in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 creates the encryption key with an insufficiently random seed, which makes it easier for attackers to crack the key.

CPENameOperatorVersion
debian_linuxeq4.0
typo3ge4.0
typo3lt4.0.10
typo3ge4.1.0
typo3lt4.1.8
typo3ge4.2.0
typo3lt4.2.4

Name	Operator	Version
debian_linux	eq	4.0
typo3	ge	4.0
typo3	lt	4.0.10
typo3	ge	4.1.0
typo3	lt	4.1.8
typo3	ge	4.2.0
typo3	lt	4.2.4

References

secunia.com/advisories/33617

secunia.com/advisories/33679

typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/

www.debian.org/security/2009/dsa-1711

www.securityfocus.com/bid/33376

exchange.xforce.ibmcloud.com/vulnerabilities/48132