mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-29 05:56:59 +00:00
108 lines
3.4 KiB
JSON
108 lines
3.4 KiB
JSON
{
|
|
"CVE_data_meta" : {
|
|
"ASSIGNER" : "cve@mitre.org",
|
|
"ID" : "CVE-2007-2727",
|
|
"STATE" : "PUBLIC"
|
|
},
|
|
"affects" : {
|
|
"vendor" : {
|
|
"vendor_data" : [
|
|
{
|
|
"product" : {
|
|
"product_data" : [
|
|
{
|
|
"product_name" : "n/a",
|
|
"version" : {
|
|
"version_data" : [
|
|
{
|
|
"version_value" : "n/a"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"vendor_name" : "n/a"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"data_format" : "MITRE",
|
|
"data_type" : "CVE",
|
|
"data_version" : "4.0",
|
|
"description" : {
|
|
"description_data" : [
|
|
{
|
|
"lang" : "eng",
|
|
"value" : "The mcrypt_create_iv function in ext/mcrypt/mcrypt.c in PHP before 4.4.7, 5.2.1, and possibly 5.0.x and other PHP 5 versions, calls php_rand_r with an uninitialized seed variable and therefore always generates the same initialization vector (IV), which might allow context-dependent attackers to decrypt certain data more easily because of the guessable encryption keys."
|
|
}
|
|
]
|
|
},
|
|
"problemtype" : {
|
|
"problemtype_data" : [
|
|
{
|
|
"description" : [
|
|
{
|
|
"lang" : "eng",
|
|
"value" : "n/a"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"references" : {
|
|
"reference_data" : [
|
|
{
|
|
"name" : "http://blog.php-security.org/archives/80-Watching-the-PHP-CVS.html",
|
|
"refsource" : "MISC",
|
|
"url" : "http://blog.php-security.org/archives/80-Watching-the-PHP-CVS.html"
|
|
},
|
|
{
|
|
"name" : "http://www.fortheloot.com/public/mcrypt.patch",
|
|
"refsource" : "MISC",
|
|
"url" : "http://www.fortheloot.com/public/mcrypt.patch"
|
|
},
|
|
{
|
|
"name" : "http://bugs.php.net/bug.php?id=40999",
|
|
"refsource" : "CONFIRM",
|
|
"url" : "http://bugs.php.net/bug.php?id=40999"
|
|
},
|
|
{
|
|
"name" : "http://cvs.php.net/viewvc.cgi/php-src/ext/mcrypt/mcrypt.c?r1=1.91.2.3.2.9&r2=1.91.2.3.2.10",
|
|
"refsource" : "CONFIRM",
|
|
"url" : "http://cvs.php.net/viewvc.cgi/php-src/ext/mcrypt/mcrypt.c?r1=1.91.2.3.2.9&r2=1.91.2.3.2.10"
|
|
},
|
|
{
|
|
"name" : "http://www.php.net/ChangeLog-5.php",
|
|
"refsource" : "CONFIRM",
|
|
"url" : "http://www.php.net/ChangeLog-5.php"
|
|
},
|
|
{
|
|
"name" : "MDKSA-2007:187",
|
|
"refsource" : "MANDRIVA",
|
|
"url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2007:187"
|
|
},
|
|
{
|
|
"name" : "SUSE-SR:2007:015",
|
|
"refsource" : "SUSE",
|
|
"url" : "http://www.novell.com/linux/security/advisories/2007_15_sr.html"
|
|
},
|
|
{
|
|
"name" : "23984",
|
|
"refsource" : "BID",
|
|
"url" : "http://www.securityfocus.com/bid/23984"
|
|
},
|
|
{
|
|
"name" : "36087",
|
|
"refsource" : "OSVDB",
|
|
"url" : "http://osvdb.org/36087"
|
|
},
|
|
{
|
|
"name" : "26895",
|
|
"refsource" : "SECUNIA",
|
|
"url" : "http://secunia.com/advisories/26895"
|
|
}
|
|
]
|
|
}
|
|
}
|