CVE-2008-2108 The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multiplication that generates a portion of zero bits during conversion due to insuffici...
CriticalCVSS 9.8
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multiplication that generates a portion of zero bits during conversion due to insufficient precision, which produces 24 bits of entropy and simplifies brute force attacks against protection mechanisms that use the rand and mt_rand functions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | >= 4.0.0, < 4.4.8 | 4.4.8 |
| PHP | >= 5.0.0, < 5.2.5 | 5.2.5 |
| fedoraproject fedora | = 8 | No fix listed |
| fedoraproject fedora | = 9 | No fix listed |
| Canonical Ubuntu Linux | = 6.06 | No fix listed |
| Canonical Ubuntu Linux | = 7.04 | No fix listed |
| Canonical Ubuntu Linux | = 7.10 | No fix listed |
| Canonical Ubuntu Linux | = 8.04 | No fix listed |
| debian linux | = 4.0 | No fix listed |
References
- 20080506 Advisory SE-2008-02: PHP GENERATE_SEED() Weak Random Number Seed Vulnerability broken-link exploit mailing-list
- 30757 broken-link third-party-advisory
- 30828 broken-link third-party-advisory
- 31119 broken-link third-party-advisory
- 31124 broken-link third-party-advisory
- 31200 broken-link third-party-advisory
- 32746 broken-link third-party-advisory
- 35003 broken-link third-party-advisory
- GLSA-200811-05 third-party-advisory vendor-advisory
- 3859 mailing-list third-party-advisory
- DSA-1789 mailing-list vendor-advisory
- MDVSA-2008:125 broken-link vendor-advisory
- MDVSA-2008:126 broken-link vendor-advisory
- MDVSA-2008:127 broken-link vendor-advisory
- MDVSA-2008:128 broken-link vendor-advisory
- MDVSA-2008:129 broken-link vendor-advisory
- MDVSA-2008:130 broken-link vendor-advisory
- RHSA-2008:0505 broken-link vendor-advisory
- RHSA-2008:0544 broken-link vendor-advisory
- RHSA-2008:0545 broken-link vendor-advisory
- RHSA-2008:0546 broken-link vendor-advisory
- RHSA-2008:0582 broken-link vendor-advisory
- 20080506 Advisory SE-2008-02: PHP GENERATE_SEED() Weak Random Number Seed Vulnerability broken-link mailing-list third-party-advisory vdb-entry
- www.sektioneins.de broken-link exploit
- USN-628-1 third-party-advisory vendor-advisory
- php-generateseed-weak-security(42226) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:10844 broken-link signature vdb-entry
- FEDORA-2008-3864 mailing-list vendor-advisory
- FEDORA-2008-3606 mailing-list vendor-advisory