CVE-2008-3168

The files utility in Empire Server before 4.3.15 discloses the world creation time, which makes it easier for attackers to determine the PRNG seed.

Link	Resource
http://freshmeat.net/projects/empserver/?branch_id=22267&release_id=280745	Patch
http://sourceforge.net/project/shownotes.php?group_id=24031&release_id=600111	Patch
http://www.securityfocus.com/bid/30152
https://exchange.xforce.ibmcloud.com/vulnerabilities/43653

Configuration 1

cpe:2.3:a:empire_server:empire_server:4.2.18:*:*:*:*:*:*:* cpe:2.3:a:empire_server:empire_server:4.2.12:*:*:*:*:*:*:* cpe:2.3:a:empire_server:empire_server:4.2.16:*:*:*:*:*:*:* cpe:2.3:a:empire_server:empire_server:4.3.10:*:*:*:*:*:*:* cpe:2.3:a:empire_server:empire_server:4.2.15:*:*:*:*:*:*:* cpe:2.3:a:empire_server:empire_server:4.2.19:*:*:*:*:*:*:* cpe:2.3:a:empire_server:empire_server:4.3.0:*:*:*:*:*:*:* cpe:2.3:a:empire_server:empire_server:4.2.11:*:*:*:*:*:*:* cpe:2.3:a:empire_server:empire_server:4.2.14:*:*:*:*:*:*:* cpe:2.3:a:empire_server:empire_server:4.2.21:*:*:*:*:*:*:* cpe:2.3:a:empire_server:empire_server:4.2.20:*:*:*:*:*:*:* cpe:2.3:a:empire_server:empire_server:4.2.22:*:*:*:*:*:*:* cpe:2.3:a:empire_server:empire_server:*:*:*:*:*:*:*:* cpe:2.3:a:empire_server:empire_server:4.2.13:*:*:*:*:*:*:* cpe:2.3:a:empire_server:empire_server:4.2.23:*:*:*:*:*:*:* cpe:2.3:a:empire_server:empire_server:4.2.17:*:*:*:*:*:*:* cpe:2.3:a:empire_server:empire_server:4.2.10:*:*:*:*:*:*:*

---

Published : 2008-07-14 11:41

Updated : 2017-08-08 01:31

---

NVD link : CVE-2008-3168

Mitre link : CVE-2008-3168

No products.

CWE-200