CVE-2009-0255

18Vexday Risk Score

Corrige pronto. Ella tiene exploit funcional público.

ssvc Attendepss 9.4%

de la publicación al arma0 días

Publicada en NVD22 ene

metasploit20 ene

probabilidad de explotación

9.4%top 5% de las CVE

explotación observada

noninguna fuente lo reporta

The System extension Install tool in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 creates the encryption key with an insufficiently random seed, which makes it easier for attackers to crack the key.

Productos afectados

n/a · n/a

Referencias

http://secunia.com/advisories/33617 http://secunia.com/advisories/33679 https://exchange.xforce.ibmcloud.com/vulnerabilities/48132 http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/http://www.debian.org/security/2009/dsa-1711 http://www.securityfocus.com/bid/33376