CVE-2008-1147

Published: Mar 4, 2008Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

A certain pseudo-random number generator (PRNG) algorithm that uses XOR and 2-bit random hops (aka "Algorithm X2"), as used in OpenBSD 2.6 through 3.4, Mac OS X 10 through 10.5.1, FreeBSD 4.4 through 7.0, and DragonFlyBSD 1.0 through 1.10.1, allows remote attackers to guess sensitive values such as IP fragmentation IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as injection into TCP packets and OS fingerprinting.

Affected (4)

Products: Cosmicperl: Directory Pro · Darwin: Darwin · Navision: Financials Server

1 product

1 product

1 product

Configuration A

4 vulnerable · 194 platform

Vulnerable Software	Affected Versions
Cosmicperl Directory Pro	Version 10.0.3
Darwin Darwin	Version 1.0
Darwin Darwin	Version 9.1
Navision Financials Server	Version 3.0

Running on/with	Platform Versions
Apple Mac Os X	Version 10.0.1
Apple Mac Os X	Version 10.0.2
Apple Mac Os X	Version 10.0.3
Apple Mac Os X	Version 10.0.4
Apple Mac Os X	Version 10.0
Apple Mac Os X	Version 10.1.1
Apple Mac Os X	Version 10.1.2
Apple Mac Os X	Version 10.1.3
Apple Mac Os X	Version 10.1.4
Apple Mac Os X	Version 10.1.5
Apple Mac Os X	Version 10.1
Apple Mac Os X	Version 10.2.1
Apple Mac Os X	Version 10.2.2
Apple Mac Os X	Version 10.2.3
Apple Mac Os X	Version 10.2.4
Apple Mac Os X	Version 10.2.5
Apple Mac Os X	Version 10.2.6
Apple Mac Os X	Version 10.2.7
Apple Mac Os X	Version 10.2.8
Apple Mac Os X	Version 10.2
Apple Mac Os X	Version 10.3.1
Apple Mac Os X	Version 10.3.2
Apple Mac Os X	Version 10.3.3
Apple Mac Os X	Version 10.3.4
Apple Mac Os X	Version 10.3.5
Apple Mac Os X	Version 10.3.6
Apple Mac Os X	Version 10.3.7
Apple Mac Os X	Version 10.3.8
Apple Mac Os X	Version 10.3.9
Apple Mac Os X	Version 10.3
Apple Mac Os X	Version 10.4.10
Apple Mac Os X	Version 10.4.11
Apple Mac Os X	Version 10.4.1
Apple Mac Os X	Version 10.4.2
Apple Mac Os X	Version 10.4.3
Apple Mac Os X	Version 10.4.4
Apple Mac Os X	Version 10.4.5
Apple Mac Os X	Version 10.4.6
Apple Mac Os X	Version 10.4.7
Apple Mac Os X	Version 10.4.8
Apple Mac Os X	Version 10.4.9
Apple Mac Os X	Version 10.4
Apple Mac Os X	Version 10.5.1
Apple Mac Os X	Version 10.5
Apple Mac Os X Server	Version 10.0
Apple Mac Os X Server	Version 10.1.1
Apple Mac Os X Server	Version 10.1.2
Apple Mac Os X Server	Version 10.1.3
Apple Mac Os X Server	Version 10.1.4
Apple Mac Os X Server	Version 10.1.5
Apple Mac Os X Server	Version 10.1
Apple Mac Os X Server	Version 10.2.1
Apple Mac Os X Server	Version 10.2.2
Apple Mac Os X Server	Version 10.2.3
Apple Mac Os X Server	Version 10.2.4
Apple Mac Os X Server	Version 10.2.5
Apple Mac Os X Server	Version 10.2.6
Apple Mac Os X Server	Version 10.2.7
Apple Mac Os X Server	Version 10.2.8
Apple Mac Os X Server	Version 10.2
Apple Mac Os X Server	Version 10.3.1
Apple Mac Os X Server	Version 10.3.2
Apple Mac Os X Server	Version 10.3.3
Apple Mac Os X Server	Version 10.3.4
Apple Mac Os X Server	Version 10.3.5
Apple Mac Os X Server	Version 10.3.6
Apple Mac Os X Server	Version 10.3.7
Apple Mac Os X Server	Version 10.3.8
Apple Mac Os X Server	Version 10.3.9
Apple Mac Os X Server	Version 10.3
Apple Mac Os X Server	Version 10.4.10
Apple Mac Os X Server	Version 10.4.11
Apple Mac Os X Server	Version 10.4.1
Apple Mac Os X Server	Version 10.4.2
Apple Mac Os X Server	Version 10.4.3
Apple Mac Os X Server	Version 10.4.4
Apple Mac Os X Server	Version 10.4.5
Apple Mac Os X Server	Version 10.4.6
Apple Mac Os X Server	Version 10.4.7
Apple Mac Os X Server	Version 10.4.8
Apple Mac Os X Server	Version 10.4.9
Apple Mac Os X Server	Version 10.4
Apple Mac Os X Server	Version 10.5
Dragonflybsd Dragonflybsd	Version 1.0
Dragonflybsd Dragonflybsd	Version 1.10.1
Dragonflybsd Dragonflybsd	Version 1.1
Dragonflybsd Dragonflybsd	Version 1.2
Freebsd Freebsd	Version 4.10
Freebsd Freebsd	Version 4.10 release
Freebsd Freebsd	Version 4.10 release_p8
Freebsd Freebsd	Version 4.10 releng
Freebsd Freebsd	Version 4.10_prerelease
Freebsd Freebsd	Version 4.11 release_p3
Freebsd Freebsd	Version 4.11 releng
Freebsd Freebsd	Version 4.11 stable
Freebsd Freebsd	Version 4.11_p20_release
Freebsd Freebsd	Version 4.11_release
Freebsd Freebsd	Version 4.4
Freebsd Freebsd	Version 4.4 release_p42
Freebsd Freebsd	Version 4.4 releng
Freebsd Freebsd	Version 4.4 stable
Freebsd Freebsd	Version 4.5
Freebsd Freebsd	Version 4.5 release
Freebsd Freebsd	Version 4.5 release_p32
Freebsd Freebsd	Version 4.5 releng
Freebsd Freebsd	Version 4.5 stable
Freebsd Freebsd	Version 4.6.2
Freebsd Freebsd	Version 4.6
Freebsd Freebsd	Version 4.6 release
Freebsd Freebsd	Version 4.6 release_p20
Freebsd Freebsd	Version 4.6 releng
Freebsd Freebsd	Version 4.6 stable
Freebsd Freebsd	Version 4.7
Freebsd Freebsd	Version 4.7 release
Freebsd Freebsd	Version 4.7 release_p17
Freebsd Freebsd	Version 4.7 releng
Freebsd Freebsd	Version 4.7 stable
Freebsd Freebsd	Version 4.8
Freebsd Freebsd	Version 4.8 release_p7
Freebsd Freebsd	Version 4.8 releng
Freebsd Freebsd	Version 4.8_prerelease
Freebsd Freebsd	Version 4.9
Freebsd Freebsd	Version 4.9 releng
Freebsd Freebsd	Version 4.9_prerelease
Freebsd Freebsd	Version 5.0
Freebsd Freebsd	Version 5.0 alpha
Freebsd Freebsd	Version 5.0 release_p14
Freebsd Freebsd	Version 5.0 releng
Freebsd Freebsd	Version 5.1
Freebsd Freebsd	Version 5.1 alpha
Freebsd Freebsd	Version 5.1 release
Freebsd Freebsd	Version 5.1 release_p5
Freebsd Freebsd	Version 5.1 releng
Freebsd Freebsd	Version 5.2.1 release
Freebsd Freebsd	Version 5.2.1 releng
Freebsd Freebsd	Version 5.2
Freebsd Freebsd	Version 5.3
Freebsd Freebsd	Version 5.3 release
Freebsd Freebsd	Version 5.3 releng
Freebsd Freebsd	Version 5.3 stable
Freebsd Freebsd	Version 5.4 release
Freebsd Freebsd	Version 5.4 releng
Freebsd Freebsd	Version 5.4 stable
Freebsd Freebsd	Version 5.5_release
Freebsd Freebsd	Version 5.5_stable
Freebsd Freebsd	Version 6.0
Freebsd Freebsd	Version 6.0 release
Freebsd Freebsd	Version 6.0 stable
Freebsd Freebsd	Version 6.0_p5_release
Freebsd Freebsd	Version 6.1
Freebsd Freebsd	Version 6.1 release
Freebsd Freebsd	Version 6.1 release_p10
Freebsd Freebsd	Version 6.1 stable
Freebsd Freebsd	Version 6.2
Freebsd Freebsd	Version 6.2 stable
Freebsd Freebsd	Version 6.2_releng
Freebsd Freebsd	Version 6.3
Freebsd Freebsd	Version 6.3_releng
Freebsd Freebsd	Version 7.0 pre-release
Freebsd Freebsd	Version 7.0_beta4
Freebsd Freebsd	Version 7.0_releng
Netbsd Netbsd	Version 1.6.2
Netbsd Netbsd	Version 2.0.1
Netbsd Netbsd	Version 2.0.2
Netbsd Netbsd	Version 2.0.3
Netbsd Netbsd	Version 2.0.4
Netbsd Netbsd	Version 2.0
Netbsd Netbsd	Version 2.1.1
Netbsd Netbsd	Version 2.1
Netbsd Netbsd	Version 3.0.1
Netbsd Netbsd	Version 3.0.2
Netbsd Netbsd	Version 3.1
Netbsd Netbsd	Version 3.1 rc1
Netbsd Netbsd	Version 3.1 rc3
Netbsd Netbsd	Version 4.0
Netbsd Netbsd	Version 4.0 beta2
Netbsd Netbsd	Version 4.0 beta
Openbsd Openbsd	Version 2.6
Openbsd Openbsd	Version 2.7
Openbsd Openbsd	Version 2.8
Openbsd Openbsd	Version 2.9
Openbsd Openbsd	Version 3.0
Openbsd Openbsd	Version 3.1
Openbsd Openbsd	Version 3.2
Openbsd Openbsd	Version 3.3
Openbsd Openbsd	Version 3.4
Openbsd Openbsd	Version 3.5
Openbsd Openbsd	Version 3.6
Openbsd Openbsd	Version 3.7
Openbsd Openbsd	Version 3.8
Openbsd Openbsd	Version 3.9
Openbsd Openbsd	Version 4.0
Openbsd Openbsd	Version 4.1
Openbsd Openbsd	Version 4.2