2.1
CVSSv2

CVE-2011-2190

Published: 07/10/2011 Updated: 14/05/2012
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
VMScore: 187
Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

The generate_admin_password function in Cherokee prior to 1.2.99 uses time and PID values for seeding of a random number generator, which makes it easier for local users to determine admin passwords via a brute-force attack.

Vulnerable Product Search on Vulmon Subscribe to Product

cherokee-project cherokee 1.2.0

cherokee-project cherokee 1.0.1

cherokee-project cherokee 1.0.8

cherokee-project cherokee 1.0.10

cherokee-project cherokee 1.0.17

cherokee-project cherokee 1.0.19

cherokee-project cherokee 0.99.3

cherokee-project cherokee 0.99.5

cherokee-project cherokee 0.99.12

cherokee-project cherokee 0.99.14

cherokee-project cherokee 0.99.21

cherokee-project cherokee 0.99.23

cherokee-project cherokee 0.99.28

cherokee-project cherokee 0.99.30

cherokee-project cherokee 0.99.37

cherokee-project cherokee 0.99.39

cherokee-project cherokee 0.99.46

cherokee-project cherokee 0.99.48

cherokee-project cherokee 0.11.1

cherokee-project cherokee 0.11.3

cherokee-project cherokee 0.9.1

cherokee-project cherokee 0.9.3

cherokee-project cherokee 0.6.0

cherokee-project cherokee 0.5.0

cherokee-project cherokee 0.5.5

cherokee-project cherokee 0.4.0

cherokee-project cherokee 0.4.7

cherokee-project cherokee 0.4.9

cherokee-project cherokee 0.4.16

cherokee-project cherokee 0.4.18

cherokee-project cherokee 0.4.23

cherokee-project cherokee 0.4.25

cherokee-project cherokee 1.0.3

cherokee-project cherokee 1.0.4

cherokee-project cherokee 1.0.5

cherokee-project cherokee 1.0.6

cherokee-project cherokee 1.0.20

cherokee-project cherokee 0.99.0

cherokee-project cherokee 0.99.1

cherokee-project cherokee 0.99.2

cherokee-project cherokee 0.99.15

cherokee-project cherokee 0.99.16

cherokee-project cherokee 0.99.17

cherokee-project cherokee 0.99.18

cherokee-project cherokee 0.99.19

cherokee-project cherokee 0.99.32

cherokee-project cherokee 0.99.33

cherokee-project cherokee 0.99.34

cherokee-project cherokee 0.99.35

cherokee-project cherokee 0.99.49

cherokee-project cherokee 0.98.0

cherokee-project cherokee 0.98.1

cherokee-project cherokee 0.11.0

cherokee-project cherokee 0.8.0

cherokee-project cherokee 0.8.1

cherokee-project cherokee 0.7.0

cherokee-project cherokee 0.7.1

cherokee-project cherokee 0.4.2

cherokee-project cherokee 0.4.3

cherokee-project cherokee 0.4.4

cherokee-project cherokee 0.4.5

cherokee-project cherokee 0.4.6

cherokee-project cherokee 0.4.19

cherokee-project cherokee 0.4.20

cherokee-project cherokee 0.4.21

cherokee-project cherokee 0.4.22

cherokee-project cherokee

cherokee-project cherokee 1.2.1

cherokee-project cherokee 1.2.2

cherokee-project cherokee 1.0.11

cherokee-project cherokee 1.0.12

cherokee-project cherokee 1.0.13

cherokee-project cherokee 1.0.14

cherokee-project cherokee 1.0.15

cherokee-project cherokee 0.99.07

cherokee-project cherokee 0.99.8

cherokee-project cherokee 0.99.9

cherokee-project cherokee 0.99.10

cherokee-project cherokee 0.99.24

cherokee-project cherokee 0.99.25

cherokee-project cherokee 0.99.26

cherokee-project cherokee 0.99.27

cherokee-project cherokee 0.99.41

cherokee-project cherokee 0.99.42

cherokee-project cherokee 0.99.43

cherokee-project cherokee 0.99.44

cherokee-project cherokee 0.11.5

cherokee-project cherokee 0.11.6

cherokee-project cherokee 0.10.0

cherokee-project cherokee 0.10.1

cherokee-project cherokee 0.5.1

cherokee-project cherokee 0.5.2

cherokee-project cherokee 0.5.3

cherokee-project cherokee 0.5.4

cherokee-project cherokee 0.4.11

cherokee-project cherokee 0.4.12

cherokee-project cherokee 0.4.13

cherokee-project cherokee 0.4.14

cherokee-project cherokee 0.4.27

cherokee-project cherokee 0.4.28

cherokee-project cherokee 0.4.29

cherokee-project cherokee 0.4.30

cherokee-project cherokee 0.3.0

cherokee-project cherokee 1.0.0

cherokee-project cherokee 1.0.2

cherokee-project cherokee 1.0.7

cherokee-project cherokee 1.0.9

cherokee-project cherokee 1.0.16

cherokee-project cherokee 1.0.18

cherokee-project cherokee 0.99.4

cherokee-project cherokee 0.99.6

cherokee-project cherokee 0.99.11

cherokee-project cherokee 0.99.13

cherokee-project cherokee 0.99.20

cherokee-project cherokee 0.99.22

cherokee-project cherokee 0.99.29

cherokee-project cherokee 0.99.31

cherokee-project cherokee 0.99.36

cherokee-project cherokee 0.99.38

cherokee-project cherokee 0.99.40

cherokee-project cherokee 0.99.45

cherokee-project cherokee 0.99.47

cherokee-project cherokee 0.11.2

cherokee-project cherokee 0.11.4

cherokee-project cherokee 0.9.0

cherokee-project cherokee 0.9.2

cherokee-project cherokee 0.9.4

cherokee-project cherokee 0.7.2

cherokee-project cherokee 0.6.1

cherokee-project cherokee 0.5.6

cherokee-project cherokee 0.4.1

cherokee-project cherokee 0.4.8

cherokee-project cherokee 0.4.10

cherokee-project cherokee 0.4.15

cherokee-project cherokee 0.4.17

cherokee-project cherokee 0.4.24

cherokee-project cherokee 0.4.26