Description
The files utility in Empire Server before 4.3.15 discloses the world creation time, which makes it easier for attackers to determine the PRNG seed.
References (4)
Core 4
Core References
Patch x_refsource_confirm
http://sourceforge.net/project/shownotes.php?group_id=24031&release_id=600111
Patch x_refsource_confirm
http://freshmeat.net/projects/empserver/?branch_id=22267&release_id=280745
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/30152
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/43653
Scores
EPSS
0.0104
EPSS Percentile
60.1%
Details
CWE
CWE-200
Status
published
Products (17)
empire_server/empire_server
4.2.10
empire_server/empire_server
4.2.11
empire_server/empire_server
4.2.12
empire_server/empire_server
4.2.13
empire_server/empire_server
4.2.14
empire_server/empire_server
4.2.15
empire_server/empire_server
4.2.16
empire_server/empire_server
4.2.17
empire_server/empire_server
4.2.18
empire_server/empire_server
4.2.19
... and 7 more
Published
Jul 14, 2008
Tracked Since
Feb 18, 2026