CVE-2011-2190

EPSS 0.09%
Published 07.10.2011 02:51:40
Last modified 11.04.2025 00:51:21
Source secalert@redhat.com
Teams watchlist Login
Open Login

The generate_admin_password function in Cherokee before 1.2.99 uses time and PID values for seeding of a random number generator, which makes it easier for local users to determine admin passwords via a brute-force attack.

Affected products Warnungen 0 Metrics 2 CWE 0 References 10

Data is provided by the National Vulnerability Database (NVD)

Cherokee-project ≫ Cherokee Version <= 1.2.98

Cherokee-project ≫ Cherokee Version0.3.0

Cherokee-project ≫ Cherokee Version0.4.0

Cherokee-project ≫ Cherokee Version0.4.1

Cherokee-project ≫ Cherokee Version0.4.2

Cherokee-project ≫ Cherokee Version0.4.3

Cherokee-project ≫ Cherokee Version0.4.4

Cherokee-project ≫ Cherokee Version0.4.5

Cherokee-project ≫ Cherokee Version0.4.6

Cherokee-project ≫ Cherokee Version0.4.7

Cherokee-project ≫ Cherokee Version0.4.8

Cherokee-project ≫ Cherokee Version0.4.9

Cherokee-project ≫ Cherokee Version0.4.10

Cherokee-project ≫ Cherokee Version0.4.11

Cherokee-project ≫ Cherokee Version0.4.12

Cherokee-project ≫ Cherokee Version0.4.13

Cherokee-project ≫ Cherokee Version0.4.14

Cherokee-project ≫ Cherokee Version0.4.15

Cherokee-project ≫ Cherokee Version0.4.16

Cherokee-project ≫ Cherokee Version0.4.17

Cherokee-project ≫ Cherokee Version0.4.18

Cherokee-project ≫ Cherokee Version0.4.19

Cherokee-project ≫ Cherokee Version0.4.20

Cherokee-project ≫ Cherokee Version0.4.21

Cherokee-project ≫ Cherokee Version0.4.22

Cherokee-project ≫ Cherokee Version0.4.23

Cherokee-project ≫ Cherokee Version0.4.24

Cherokee-project ≫ Cherokee Version0.4.25

Cherokee-project ≫ Cherokee Version0.4.26

Cherokee-project ≫ Cherokee Version0.4.27

Cherokee-project ≫ Cherokee Version0.4.28

Cherokee-project ≫ Cherokee Version0.4.29

Cherokee-project ≫ Cherokee Version0.4.30

Cherokee-project ≫ Cherokee Version0.5.0

Cherokee-project ≫ Cherokee Version0.5.1

Cherokee-project ≫ Cherokee Version0.5.2

Cherokee-project ≫ Cherokee Version0.5.3

Cherokee-project ≫ Cherokee Version0.5.4

Cherokee-project ≫ Cherokee Version0.5.5

Cherokee-project ≫ Cherokee Version0.5.6

Cherokee-project ≫ Cherokee Version0.6.0

Cherokee-project ≫ Cherokee Version0.6.1

Cherokee-project ≫ Cherokee Version0.7.0

Cherokee-project ≫ Cherokee Version0.7.1

Cherokee-project ≫ Cherokee Version0.7.2

Cherokee-project ≫ Cherokee Version0.8.0

Cherokee-project ≫ Cherokee Version0.8.1

Cherokee-project ≫ Cherokee Version0.9.0

Cherokee-project ≫ Cherokee Version0.9.1

Cherokee-project ≫ Cherokee Version0.9.2

Cherokee-project ≫ Cherokee Version0.9.3

Cherokee-project ≫ Cherokee Version0.9.4

Cherokee-project ≫ Cherokee Version0.10.0

Cherokee-project ≫ Cherokee Version0.10.1

Cherokee-project ≫ Cherokee Version0.11.0

Cherokee-project ≫ Cherokee Version0.11.1

Cherokee-project ≫ Cherokee Version0.11.2

Cherokee-project ≫ Cherokee Version0.11.3

Cherokee-project ≫ Cherokee Version0.11.4

Cherokee-project ≫ Cherokee Version0.11.5

Cherokee-project ≫ Cherokee Version0.11.6

Cherokee-project ≫ Cherokee Version0.98.0

Cherokee-project ≫ Cherokee Version0.98.1

Cherokee-project ≫ Cherokee Version0.99.0

Cherokee-project ≫ Cherokee Version0.99.1

Cherokee-project ≫ Cherokee Version0.99.2

Cherokee-project ≫ Cherokee Version0.99.3

Cherokee-project ≫ Cherokee Version0.99.4

Cherokee-project ≫ Cherokee Version0.99.5

Cherokee-project ≫ Cherokee Version0.99.6

Cherokee-project ≫ Cherokee Version0.99.07

Cherokee-project ≫ Cherokee Version0.99.8

Cherokee-project ≫ Cherokee Version0.99.9

Cherokee-project ≫ Cherokee Version0.99.10

Cherokee-project ≫ Cherokee Version0.99.11

Cherokee-project ≫ Cherokee Version0.99.12

Cherokee-project ≫ Cherokee Version0.99.13

Cherokee-project ≫ Cherokee Version0.99.14

Cherokee-project ≫ Cherokee Version0.99.15

Cherokee-project ≫ Cherokee Version0.99.16

Cherokee-project ≫ Cherokee Version0.99.17

Cherokee-project ≫ Cherokee Version0.99.18

Cherokee-project ≫ Cherokee Version0.99.19

Cherokee-project ≫ Cherokee Version0.99.20

Cherokee-project ≫ Cherokee Version0.99.21

Cherokee-project ≫ Cherokee Version0.99.22

Cherokee-project ≫ Cherokee Version0.99.23

Cherokee-project ≫ Cherokee Version0.99.24

Cherokee-project ≫ Cherokee Version0.99.25

Cherokee-project ≫ Cherokee Version0.99.26

Cherokee-project ≫ Cherokee Version0.99.27

Cherokee-project ≫ Cherokee Version0.99.28

Cherokee-project ≫ Cherokee Version0.99.29

Cherokee-project ≫ Cherokee Version0.99.30

Cherokee-project ≫ Cherokee Version0.99.31

Cherokee-project ≫ Cherokee Version0.99.32

Cherokee-project ≫ Cherokee Version0.99.33

Cherokee-project ≫ Cherokee Version0.99.34

Cherokee-project ≫ Cherokee Version0.99.35

Cherokee-project ≫ Cherokee Version0.99.36

Cherokee-project ≫ Cherokee Version0.99.37

Cherokee-project ≫ Cherokee Version0.99.38

Cherokee-project ≫ Cherokee Version0.99.39

Cherokee-project ≫ Cherokee Version0.99.40

Cherokee-project ≫ Cherokee Version0.99.41

Cherokee-project ≫ Cherokee Version0.99.42

Cherokee-project ≫ Cherokee Version0.99.43

Cherokee-project ≫ Cherokee Version0.99.44

Cherokee-project ≫ Cherokee Version0.99.45

Cherokee-project ≫ Cherokee Version0.99.46

Cherokee-project ≫ Cherokee Version0.99.47

Cherokee-project ≫ Cherokee Version0.99.48

Cherokee-project ≫ Cherokee Version0.99.49

Cherokee-project ≫ Cherokee Version1.0.0

Cherokee-project ≫ Cherokee Version1.0.1

Cherokee-project ≫ Cherokee Version1.0.2

Cherokee-project ≫ Cherokee Version1.0.3

Cherokee-project ≫ Cherokee Version1.0.4

Cherokee-project ≫ Cherokee Version1.0.5

Cherokee-project ≫ Cherokee Version1.0.6

Cherokee-project ≫ Cherokee Version1.0.7

Cherokee-project ≫ Cherokee Version1.0.8

Cherokee-project ≫ Cherokee Version1.0.9

Cherokee-project ≫ Cherokee Version1.0.10

Cherokee-project ≫ Cherokee Version1.0.11

Cherokee-project ≫ Cherokee Version1.0.12

Cherokee-project ≫ Cherokee Version1.0.13

Cherokee-project ≫ Cherokee Version1.0.14

Cherokee-project ≫ Cherokee Version1.0.15

Cherokee-project ≫ Cherokee Version1.0.16

Cherokee-project ≫ Cherokee Version1.0.17

Cherokee-project ≫ Cherokee Version1.0.18

Cherokee-project ≫ Cherokee Version1.0.19

Cherokee-project ≫ Cherokee Version1.0.20

Cherokee-project ≫ Cherokee Version1.2.0

Cherokee-project ≫ Cherokee Version1.2.1

Cherokee-project ≫ Cherokee Version1.2.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.09%	0.26

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:P/I:N/A:N

http://code.google.com/p/cherokee/issues/detail?id=1212

Patch

http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066222.html

http://www.cherokee-project.com/download/LATEST_is_1.2.99/cherokee-1.2.99.tar.gz

Patch

http://www.openwall.com/lists/oss-security/2011/06/03/4

Patch

http://www.openwall.com/lists/oss-security/2011/06/06/21

Patch

http://www.securityfocus.com/bid/49772

https://bugzilla.redhat.com/show_bug.cgi?id=713304

Patch

https://nvd.nist.gov/vuln/detail/CVE-2011-2190

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-2190

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-2190

EUVD