CVE-2008-3168

The files utility in Empire Server before 4.3.15 discloses the world creation time, which makes it easier for attackers to determine the PRNG seed...

PHP 32 bit weak random seed

The GENERATESEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit systems, performs a multiplication using values that can produce a zero seed in rare circumstances, which allows context-dependent attackers to predict subsequent values of the rand and mtrand functions an...

PHP weak 64 bit random seed

The GENERATESEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multiplication that generates a portion of zero bits during conversion due to insufficient precision, which produces 24 bits of entropy and simplifies brute force attacks against...

Unfixed XSS vulnerability at www.onsemi.com

Security researcher SeeD, has submitted on 24/06/2008 a cross-site-scripting XSS vulnerability affecting www.onsemi.com, which at the time of submission ranked 83872 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2008. It is currently...

Unfixed XSS vulnerability at www.compumundo.com.ar

Security researcher SeeD, has submitted on 06/07/2008 a cross-site-scripting XSS vulnerability affecting www.compumundo.com.ar, which at the time of submission ranked 94407 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2008. It is...

Advisory SE-2008-02: PHP GENERATE_SEED() Weak Random Number Seed Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SektionEins GmbH www.sektioneins.de -= Security Advisory =- Advisory: PHP GENERATESEED Weak Random Number Seed Vulnerability Release Date: 2008/05/06 Last Modified: 2008/05/06 Author: Stefan Esser stefan.esseratsektioneins.de Application: PHP 5 = 5.2....

CVE-2008-2107

The GENERATESEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit systems, performs a multiplication using values that can produce a zero seed in rare circumstances, which allows context-dependent attackers to predict subsequent values of the rand and mtrand functions an...

CVE-2008-2107

The GENERATESEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit systems, performs a multiplication using values that can produce a zero seed in rare circumstances, which allows context-dependent attackers to predict subsequent values of the rand and mtrand functions an...

PT-2008-3624 · Php +1 · Php +1

Name of the Vulnerable Software and Affected Versions: PHP versions 4.x through 4.4.7 PHP versions 5.x through 5.2.4 Description: The issue arises from the GENERATE SEED macro, which, when running on 64-bit systems, performs a multiplication that generates a portion of zero bits during conversion...

DEBIAN-CVE-2008-1637

PowerDNS Recursor before 3.1.5 uses insufficient randomness to calculate 1 TRXID values and 2 UDP source port numbers, which makes it easier for remote attackers to poison a DNS cache, related to a algorithmic deficiencies in rand and random functions in external libraries, b use of a 32-bit seed...

Improper access control

PowerDNS Recursor before 3.1.5 uses insufficient randomness to calculate 1 TRXID values and 2 UDP source port numbers, which makes it easier for remote attackers to poison a DNS cache, related to a algorithmic deficiencies in rand and random functions in external libraries, b use of a 32-bit seed...

CVE-2008-1637

PowerDNS Recursor before 3.1.5 uses insufficient randomness to calculate 1 TRXID values and 2 UDP source port numbers, which makes it easier for remote attackers to poison a DNS cache, related to a algorithmic deficiencies in rand and random functions in external libraries, b use of a 32-bit seed...

Unfixed XSS vulnerability at frh.utn.edu.ar

Security researcher SeeD, has submitted on 30/03/2008 a cross-site-scripting XSS vulnerability affecting frh.utn.edu.ar, which at the time of submission ranked 9183 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/03/2008. It is currently...

Advisory SE-2008-01: PunBB Blind Password Recovery Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SektionEins GmbH www.sektioneins.de -= Security Advisory =- Advisory: PunBB Blind Password Recovery Vulnerability Release Date: 2008/02/20 Last Modified: 2008/02/20 Author: Stefan Esser stefan.esseratsektioneins.de Application: PunBB = 1.2.16 Severity...

Debian Security Advisory DSA 956-1 (lsh-utils)

The remote host is missing an update to lsh-utils announced via advisory DSA 956-1. Stefan Pfetzing discovered that lshd, a Secure Shell v2 SSH2 protocol server, leaks a couple of file descriptors, related to the randomness generator, to user shells which are started by lshd. A local attacker can...

Unfixed XSS vulnerability at myplay-games.org

Security researcher SeeD, has submitted on 26/12/2007 a cross-site-scripting XSS vulnerability affecting myplay-games.org, which at the time of submission ranked 1199397 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/01/2008. It is currentl...

Unfixed XSS vulnerability at www.disccrs.org

Security researcher SeeD, has submitted on 17/12/2007 a cross-site-scripting XSS vulnerability affecting www.disccrs.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/01/2008. It is currently...

Unfixed XSS vulnerability at www-gap.dcs.st-and.ac.uk

Security researcher SeeD, has submitted on 17/12/2007 a cross-site-scripting XSS vulnerability affecting www-gap.dcs.st-and.ac.uk, which at the time of submission ranked 14140 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is...

Unfixed XSS vulnerability at www.sf-monheim.de

Security researcher SeeD, has submitted on 12/12/2007 a cross-site-scripting XSS vulnerability affecting www.sf-monheim.de, which at the time of submission ranked 6154280 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2007. It is current...

Unfixed XSS vulnerability at www.tenavat.net

Security researcher SeeD, has submitted on 12/12/2007 a cross-site-scripting XSS vulnerability affecting www.tenavat.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/12/2007. It is currently...