CVE-2008-3168

The files utility in Empire Server before 4.3.15 discloses the world creation time, which makes it easier for attackers to determine the PRNG seed.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
empire_serverempire_server
𝑥
≤ 4.3.11
empire_serverempire_server
4.2.10
empire_serverempire_server
4.2.11
empire_serverempire_server
4.2.12
empire_serverempire_server
4.2.13
empire_serverempire_server
4.2.14
empire_serverempire_server
4.2.15
empire_serverempire_server
4.2.16
empire_serverempire_server
4.2.17
empire_serverempire_server
4.2.18
empire_serverempire_server
4.2.19
empire_serverempire_server
4.2.20
empire_serverempire_server
4.2.21
empire_serverempire_server
4.2.22
empire_serverempire_server
4.2.23
empire_serverempire_server
4.3.0
empire_serverempire_server
4.3.10
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://freshmeat.net/projects/empserver/?branch_id=22267&release_id=280745
http://sourceforge.net/project/shownotes.php?group_id=24031&release_id=600111
http://www.securityfocus.com/bid/30152
https://exchange.xforce.ibmcloud.com/vulnerabilities/43653
http://freshmeat.net/projects/empserver/?branch_id=22267&release_id=280745
http://sourceforge.net/project/shownotes.php?group_id=24031&release_id=600111
http://www.securityfocus.com/bid/30152
https://exchange.xforce.ibmcloud.com/vulnerabilities/43653