CVE-2009-0255 | BDVDB-2026-34440 Detail

Description#

The System extension Install tool in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 creates the encryption key with an insufficiently random seed, which makes it easier for attackers to crack the key.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/
http://secunia.com/advisories/33617
http://www.debian.org/security/2009/dsa-1711
https://exchange.xforce.ibmcloud.com/vulnerabilities/48132
http://www.securityfocus.com/bid/33376
http://secunia.com/advisories/33679

Exploit#

No public exploit known

History#

Version 12009-01-22Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.