VYPR
← All advisories
Critical severity9.8NVD Advisory· Published May 7, 2008· Updated Jun 16, 2026

CVE-2008-2108

CVE-2008-2108

Description

The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multiplication that generates a portion of zero bits during conversion due to insufficient precision, which produces 24 bits of entropy and simplifies brute force attacks against protection mechanisms that use the rand and mt_rand functions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • PHP/PHP2 versions
    cpe:2.3:a:php:php:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:php:php:*:*:*:*:*:*:*:*range: >=4.0.0,<4.4.8
    • (no CPE)range: <4.4.8, <5.2.5
  • Canonical/Ubuntu Linux4 versions
    cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*
  • Debian/linux
    cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
  • Fedoraproject/Fedora2 versions
    cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

29

News mentions

0

No linked articles in our index yet.