Back to CVE Browser

CVE-2008-1147

MEDIUM

6.8

CVSS Severity Score

EPSS Score0.0660%

EPSS Percentile34.74th

PublishedMar 4, 2008

Last ModifiedApr 23, 2026

Vulnerability Description

A certain pseudo-random number generator (PRNG) algorithm that uses XOR and 2-bit random hops (aka "Algorithm X2"), as used in OpenBSD 2.6 through 3.4, Mac OS X 10 through 10.5.1, FreeBSD 4.4 through 7.0, and DragonFlyBSD 1.0 through 1.10.1, allows remote attackers to guess sensitive values such as IP fragmentation IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as injection into TCP packets and OS fingerprinting.

Affected Platforms (CPE)

📦

Cosmicperl

Directory Pro

= 10.0.3

📦

Darwin

Darwin

= 1.0

📦

Darwin

Darwin

= 9.1

📦

Navision

Financials Server

= 3.0

References & Advisories

🔗 http://seclists.org/bugtraq/2008/Feb/0052.html

🔗 http://seclists.org/bugtraq/2008/Feb/0063.html

🔗 http://secunia.com/advisories/28819

🔗 http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/netinet/ip_id.c?rev=1.10%3Bcontenttype=

🔗 http://www.securiteam.com/securityreviews/5PP0H0UNGW.html

🔗 http://www.securityfocus.com/archive/1/487658

🔗 http://www.securityfocus.com/bid/27647

🔗 http://www.trusteer.com/docs/OpenBSD_DNS_Cache_Poisoning_and_Multiple_OS_Predictable_IP_ID_Vulnerability.pdf

Related Vulnerabilities

CVE-2008-111710.0

Directory traversal vulnerability in the Notes (aka Flash Notes or instant messages) feature in tb2ftp.dll in Timbuktu Pro 8.6.5 f...

CVE-2021-262939.8

An issue was discovered in AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3, when DAV is enabled. They allow director...

CVE-2008-27799.3

Directory traversal vulnerability in GlobalSCAPE CuteFTP Home 8.2.0 Build 02.26.2008.4 and CuteFTP Pro 8.2.0 Build 04.01.2008.1 al...

CVE-2008-51759.3

Directory traversal vulnerability in the FTP client in AceFTP Freeware 3.80.3 and AceFTP Pro 3.80.3 allows remote FTP servers to c...