CVE-2008-4125

EUVD-2008-4108
The search function in phpBB 2.x provides a search_id value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive information, as demonstrated by a cross-application attack against WordPress, a different vulnerability than CVE-2006-0632.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 44%
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
phpbb2
dapper
ignored
feisty
ignored
gutsy
ignored
hardy
ignored
intrepid
not-affected
jaunty
dne
karmic
dne
lucid
dne
maverick
dne
natty
dne
oneiric
dne
Common Weakness Enumeration
References
http://www.suspekt.org/2008/08/17/mt_srand-and-not-so-random-numbers/
https://exchange.xforce.ibmcloud.com/vulnerabilities/45415
http://www.suspekt.org/2008/08/17/mt_srand-and-not-so-random-numbers/
https://exchange.xforce.ibmcloud.com/vulnerabilities/45415