CVE-2008-3168

EUVD-2008-3158
The files utility in Empire Server before 4.3.15 discloses the world creation time, which makes it easier for attackers to determine the PRNG seed.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 55%
Affected Products (NVD)
VendorProductVersion
empire_serverempire_server
𝑥
≤ 4.3.11
empire_serverempire_server
4.2.10
empire_serverempire_server
4.2.11
empire_serverempire_server
4.2.12
empire_serverempire_server
4.2.13
empire_serverempire_server
4.2.14
empire_serverempire_server
4.2.15
empire_serverempire_server
4.2.16
empire_serverempire_server
4.2.17
empire_serverempire_server
4.2.18
empire_serverempire_server
4.2.19
empire_serverempire_server
4.2.20
empire_serverempire_server
4.2.21
empire_serverempire_server
4.2.22
empire_serverempire_server
4.2.23
empire_serverempire_server
4.3.0
empire_serverempire_server
4.3.10
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://freshmeat.net/projects/empserver/?branch_id=22267&release_id=280745
http://sourceforge.net/project/shownotes.php?group_id=24031&release_id=600111
http://www.securityfocus.com/bid/30152
https://exchange.xforce.ibmcloud.com/vulnerabilities/43653
http://freshmeat.net/projects/empserver/?branch_id=22267&release_id=280745
http://sourceforge.net/project/shownotes.php?group_id=24031&release_id=600111
http://www.securityfocus.com/bid/30152
https://exchange.xforce.ibmcloud.com/vulnerabilities/43653