CVE-2008-2107 in PHP
Summary
The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit systems, performs a multiplication using values that can produce a zero seed in rare circumstances, which allows context-dependent attackers to predict subsequent values of the rand and mt_rand functions and possibly bypass protection mechanisms that rely on an unknown initial seed.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
05/07/2008
Disclosure
05/07/2008
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 3696 | PHP cURL numeric error | 189 | High | Official fix | CVE-2008-2107 |