CVE-2008-2108
published 2008-05-07CVE-2008-2108: The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multiplication that generates a portion of…
PriorityP337critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
4.29%
90.0th percentile
The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multiplication that generates a portion of zero bits during conversion due to insufficient precision, which produces 24 bits of entropy and simplifies brute force attacks against protection mechanisms that use the rand and mt_rand functions.
Affected
62 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| php | php | <= 4.4.8 | — |
| php | php | <= 5.2.5 | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
| php | php | — | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat9.8CRITICAL
vendor_ubuntu5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
PHP: insecure random numbers
vendor_redhat·2008-09-11·CVSS 7.5
CVE-2008-4107 [HIGH] PHP: insecure random numbers
PHP: insecure random numbers
The (1) rand and (2) mt_rand functions in PHP 5.2.6 do not produce cryptographically strong random numbers, which allows attackers to leverage exposures in products that rely on these functions for security-relevant functionality, as demonstrated by the password-reset functionality in Joomla! 1.5.x and WordPress before 2.6.2, a different vulnerability than CVE-2008-2107, CVE-2008-2108, and CVE-2008-4102.
Statement: The risks associated with fixing this bug are greater than the security risk. We therefore currently have no plans to fix this flaw in Red HatEnterprise Linux 2.1, 3, 4, or 5.
For more information please see our bug for this issue:
https://bugzilla.redhat.com/show_bug.cgi?id=462772
Ubuntu
PHP vulnerabilities
vendor_ubuntu·2008-07-23·CVSS 5.0
CVE-2007-4782 [MEDIUM] PHP vulnerabilities
Title: PHP vulnerabilities
Summary: PHP vulnerabilities
It was discovered that PHP did not properly check the length of the
string parameter to the fnmatch function. An attacker could cause a
denial of service in the PHP interpreter if a script passed untrusted
input to the fnmatch function. (CVE-2007-4782)
Maksymilian Arciemowicz discovered a flaw in the cURL library that
allowed safe_mode and open_basedir restrictions to be bypassed. If a
PHP application were tricked into processing a bad file:// request,
an attacker could read arbitrary files. (CVE-2007-4850)
Rasmus Lerdorf discovered that the htmlentities and htmlspecialchars
functions did not correctly stop when handling partial multibyte
sequences. A remote attacker could exploit this to read certain areas
of memory, possibly gai
Red Hat
PHP weak 64 bit random seed
vendor_redhat·2008-05-06·CVSS 9.8
CVE-2008-2108 [CRITICAL] PHP weak 64 bit random seed
PHP weak 64 bit random seed
The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multiplication that generates a portion of zero bits during conversion due to insufficient precision, which produces 24 bits of entropy and simplifies brute force attacks against protection mechanisms that use the rand and mt_rand functions.
GHSA
GHSA-q8f7-frqh-rw7w: The (1) rand and (2) mt_rand functions in PHP 5
ghsa_unreviewed·2022-05-02·CVSS 7.5
CVE-2008-4107 [HIGH] GHSA-q8f7-frqh-rw7w: The (1) rand and (2) mt_rand functions in PHP 5
The (1) rand and (2) mt_rand functions in PHP 5.2.6 do not produce cryptographically strong random numbers, which allows attackers to leverage exposures in products that rely on these functions for security-relevant functionality, as demonstrated by the password-reset functionality in Joomla! 1.5.x and WordPress before 2.6.2, a different vulnerability than CVE-2008-2107, CVE-2008-2108, and CVE-2008-4102.
GHSA
GHSA-ch9c-f347-cqvw: The GENERATE_SEED macro in PHP 4
ghsa_unreviewed·2022-05-01
CVE-2008-2108 [HIGH] CWE-331 GHSA-ch9c-f347-cqvw: The GENERATE_SEED macro in PHP 4
The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multiplication that generates a portion of zero bits during conversion due to insufficient precision, which produces 24 bits of entropy and simplifies brute force attacks against protection mechanisms that use the rand and mt_rand functions.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2008-4107 PHP: insecure random numbers
bugzilla·2008-09-18·CVSS 7.5
CVE-2008-4107 [HIGH] CVE-2008-4107 PHP: insecure random numbers
CVE-2008-4107 PHP: insecure random numbers
The (1) rand and (2) mt_rand functions in PHP 5.2.6 do not produce
cryptographically strong random numbers, which allows attackers to
leverage exposures in products that rely on these functions for
security-relevant functionality, as demonstrated by the password-reset
functionality in Joomla! 1.5.x and WordPress before 2.6.2, a different
vulnerability than CVE-2008-2107, CVE-2008-2108, and CVE-2008-4102.
Note, wordpress 2.6.2 has been pushed for Fedora 8 and 9
Discussion:
This blog entry explains this problem in more details:
http://www.suspekt.org/2008/08/17/mt_srand-and-not-so-random-numbers/
The bits that are relevant to PHP are this:
Implementation Bugs
In PHP 4 and PHP <= 5.2.5 the automatic seed of rand() and mt_srand() is
buggy. When
Bugzilla
CVE-2008-2108 PHP weak 64 bit random seed
bugzilla·2008-05-08·CVSS 9.8
CVE-2008-2108 [CRITICAL] CVE-2008-2108 PHP weak 64 bit random seed
CVE-2008-2108 PHP weak 64 bit random seed
Common Vulnerabilities and Exposures assigned an identifier CVE-2008-2108 to the following vulnerability:
The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multiplication that generates a portion of zero bits during conversion due to insufficient precision, which produces 24 bits of entropy and simplifies brute force attacks against protection mechanisms that use the rand and mt_rand functions.
Refences:
http://www.securityfocus.com/archive/1/archive/1/491683/100/0/threaded
http://archives.neohapsis.com/archives/fulldisclosure/2008-05/0103.html
http://www.sektioneins.de/advisories/SE-2008-02.txt
http://xforce.iss.net/xforce/xfdb/42226
Discussion:
php-5.2.6-2.fc9 has been pushed to
CWE
Insufficient Entropy
mitre_cwe
CWE-331 Insufficient Entropy
CWE-331: Insufficient Entropy
The product uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.
Modes of Introduction:
Phase: Architecture and Design
Phase: Implementation
Note: REALIZATION: This weakness is caused during implementation of an architectural security tactic.
Common Consequences:
Scope: Access Control, Other. Impact: Bypass Protection Mechanism, Other. An attacker could guess the random numbers generated and could gain unauthorized access to a system if the random numbers are used for authentication and authorization.
Detection Methods:
Automated Static Analysis: Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances o
CWE
Insufficient Precision or Accuracy of a Real Number
mitre_cwe
CWE-1339 Insufficient Precision or Accuracy of a Real Number
CWE-1339: Insufficient Precision or Accuracy of a Real Number
The product processes a real number with an implementation in which the number's representation does not preserve required accuracy and precision in its fractional part, causing an incorrect result.
When a security decision or calculation requires highly precise, accurate numbers such as financial calculations or prices, then small variations in the number could be exploited by an attacker. There are multiple ways to store the fractional part of a real number in a computer. In all of these cases, there is a limit to the accuracy of recording a fraction. If the fraction can be represented in a fixed number of digits (binary or decimal), there might not be enough digits assigned to represent the number. In other cases the number
CWE
Use of Insufficiently Random Values
mitre_cwe
CWE-330 Use of Insufficiently Random Values
CWE-330: Use of Insufficiently Random Values
The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.
Background: Computers are deterministic machines, and as such are unable to produce true randomness. Pseudo-Random Number Generators (PRNGs) approximate randomness algorithmically, starting with a seed from which subsequent values are calculated. There are two types of PRNGs: statistical and cryptographic. Statistical PRNGs provide useful statistical properties, but their output is highly predictable and forms an easy to reproduce numeric stream that is unsuitable for use in cases where security depends on generated values being unpredictable. Cryptographic PRNGs address this problem by generating output that is more difficult
http://archives.neohapsis.com/archives/fulldisclosure/2008-05/0103.htmlhttp://secunia.com/advisories/30757http://secunia.com/advisories/30828http://secunia.com/advisories/31119http://secunia.com/advisories/31124http://secunia.com/advisories/31200http://secunia.com/advisories/32746http://secunia.com/advisories/35003http://security.gentoo.org/glsa/glsa-200811-05.xmlhttp://securityreason.com/securityalert/3859http://www.debian.org/security/2009/dsa-1789http://www.mandriva.com/security/advisories?name=MDVSA-2008:125http://www.mandriva.com/security/advisories?name=MDVSA-2008:126http://www.mandriva.com/security/advisories?name=MDVSA-2008:127http://www.mandriva.com/security/advisories?name=MDVSA-2008:128http://www.mandriva.com/security/advisories?name=MDVSA-2008:129http://www.mandriva.com/security/advisories?name=MDVSA-2008:130http://www.redhat.com/support/errata/RHSA-2008-0505.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0544.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0545.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0546.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0582.htmlhttp://www.securityfocus.com/archive/1/491683/100/0/threadedhttp://www.sektioneins.de/advisories/SE-2008-02.txthttp://www.ubuntu.com/usn/usn-628-1https://exchange.xforce.ibmcloud.com/vulnerabilities/42226https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10844https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00773.htmlhttps://www.redhat.com/archives/fedora-package-announce/2008-June/msg00779.htmlhttp://archives.neohapsis.com/archives/fulldisclosure/2008-05/0103.htmlhttp://secunia.com/advisories/30757http://secunia.com/advisories/30828http://secunia.com/advisories/31119http://secunia.com/advisories/31124http://secunia.com/advisories/31200http://secunia.com/advisories/32746http://secunia.com/advisories/35003http://security.gentoo.org/glsa/glsa-200811-05.xmlhttp://securityreason.com/securityalert/3859http://www.debian.org/security/2009/dsa-1789http://www.mandriva.com/security/advisories?name=MDVSA-2008:125http://www.mandriva.com/security/advisories?name=MDVSA-2008:126http://www.mandriva.com/security/advisories?name=MDVSA-2008:127http://www.mandriva.com/security/advisories?name=MDVSA-2008:128http://www.mandriva.com/security/advisories?name=MDVSA-2008:129http://www.mandriva.com/security/advisories?name=MDVSA-2008:130http://www.redhat.com/support/errata/RHSA-2008-0505.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0544.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0545.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0546.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0582.htmlhttp://www.securityfocus.com/archive/1/491683/100/0/threadedhttp://www.sektioneins.de/advisories/SE-2008-02.txthttp://www.ubuntu.com/usn/usn-628-1https://exchange.xforce.ibmcloud.com/vulnerabilities/42226https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10844https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00773.htmlhttps://www.redhat.com/archives/fedora-package-announce/2008-June/msg00779.html
2008-05-07
Published