CVE-2008-3072 Weak cryptography in n/a

High 7.5 Published 8 Jul 2008 Updated 7 Aug 2024

Improper random number seeding in SMF on old PHP versions may weaken security features, requiring an upgrade to fix.

Exploited in the wild: Not known
Login needed: Not stated
Attackable: Over the internet
Victim action needed: Not stated
Fix: None listed

What is CVE-2008-3072?

CVE-2008-3072 is a high-severity vulnerability in n/a, published on 8 Jul 2008. It can be exploited over the network.

Official description

Simple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP before 4.2.0, does not properly seed the random number generator, which has unknown impact and attack vectors.

Weakness: CWE-189

Which versions are affected by CVE-2008-3072?

It affects 1 product.

Products include Simple Machines Simple Machines Forum.

How do I fix CVE-2008-3072?

No fix has been published for CVE-2008-3072 yet. Limit exposure of the affected software until one is available.

Is CVE-2008-3072 being exploited?

There is no known exploitation of CVE-2008-3072 in the wild and no public exploit code.

Sources

Also known as GHSA-j5w2-6mxx-vrmv.