CVE-2008-3168

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The files utility in Empire Server before 4.3.15 discloses the world creation time, which makes it easier for attackers to determine the PRNG seed.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-200

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jul 14, 2008
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2008

CVE-2008-316910.0Multiple heap-based buffer overflows in Empire Server before 4.3.15 allow remote attackers to cause a denial of service or possibly execute CVE-2008-31706.8Apple Safari allows web sites to set cookies for country-specific top-level domains, such as co.uk and com.au, which could allow remote attaCVE-2008-31715.0Apple Safari sends Referer headers containing https URLs to different https web sites, which allows remote attackers to obtain potentially sCVE-2008-31726.8Opera allows web sites to set cookies for country-specific top-level domains that have DNS A records, such as co.tv, which could allow remotCVE-2008-31736.8Microsoft Internet Explorer allows web sites to set cookies for domains that have a public suffix with more than one dot character, which coCVE-2008-31745.0Unspecified vulnerability in the kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security SuCVE-2008-317510.0Integer underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and Desktops 11.0 through 11.5 allowsCVE-2008-31775.0Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus InterfCVE-2008-31787.5Unrestricted file upload vulnerability in upload_pictures.php in WebXell Editor 0.1.3 allows remote attackers to execute arbitrary code by uCVE-2008-31797.5Directory traversal vulnerability in website.php in Web 2 Business (W2B) phpDatingClub (aka Dating Club) 3.7 allows remote attackers to inclCVE-2008-31804.3Multiple cross-site scripting (XSS) vulnerabilities in upload/file/language_menu.php in ContentNow CMS 1.4.1 allow remote attackers to injecCVE-2008-31816.5Unrestricted file upload vulnerability in upload.php in ContentNow CMS 1.4.1 allows remote authenticated users to execute arbitrary code by
CVE-2008-3168: Medium severity, CVSS 5.0 | Vulnix