Vulnerability Details CVE-2008-3168
The files utility in Empire Server before 4.3.15 discloses the world creation time, which makes it easier for attackers to determine the PRNG seed.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 55.1%
CVSS Severity
CVSS v2 Score 5.0
References
- http://freshmeat.net/projects/empserver/?branch_id=22267&release_id=280745
- http://sourceforge.net/project/shownotes.php?group_id=24031&release_id=600111
- http://www.securityfocus.com/bid/30152
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43653
- http://freshmeat.net/projects/empserver/?branch_id=22267&release_id=280745
- http://sourceforge.net/project/shownotes.php?group_id=24031&release_id=600111
- http://www.securityfocus.com/bid/30152
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43653
Products affected by CVE-2008-3168
-
cpe:2.3:a:empire_server:empire_server:*
-
cpe:2.3:a:empire_server:empire_server:4.2.10
-
cpe:2.3:a:empire_server:empire_server:4.2.11
-
cpe:2.3:a:empire_server:empire_server:4.2.12
-
cpe:2.3:a:empire_server:empire_server:4.2.13
-
cpe:2.3:a:empire_server:empire_server:4.2.14
-
cpe:2.3:a:empire_server:empire_server:4.2.15
-
cpe:2.3:a:empire_server:empire_server:4.2.16
-
cpe:2.3:a:empire_server:empire_server:4.2.17
-
cpe:2.3:a:empire_server:empire_server:4.2.18
-
cpe:2.3:a:empire_server:empire_server:4.2.19
-
cpe:2.3:a:empire_server:empire_server:4.2.20
-
cpe:2.3:a:empire_server:empire_server:4.2.21
-
cpe:2.3:a:empire_server:empire_server:4.2.22
-
cpe:2.3:a:empire_server:empire_server:4.2.23
-
cpe:2.3:a:empire_server:empire_server:4.3.0
-
cpe:2.3:a:empire_server:empire_server:4.3.10