Bugzilla Pseudo-Random Number Generator Shared Seed Vulnerability

Bugtraq ID:	33581
Class:	Design Error
CVE:	CVE-2009-0486
Remote:	Yes
Local:	No
Published:	Feb 03 2009 12:00AM
Updated:	Apr 13 2015 09:34PM
Credit:	Max Kanat-Alexander, Philippe M. Chiasson, and Dave Miller
Vulnerable:	Mozilla Bugzilla 3.3.2 Mozilla Bugzilla 3.2.1 Mozilla Bugzilla 3.0.7 Gentoo Linux
Not Vulnerable:	Mozilla Bugzilla 3.3.3 Mozilla Bugzilla 3.2.2 Mozilla Bugzilla 3.0.8

Bugzilla Pseudo-Random Number Generator Shared Seed Vulnerability

Bugzilla is prone to a vulnerability caused by the use of a shared random seed. This issue occurs when Bugzilla is running under mod_perl.

An attacker may exploit this issue to predict random values generated by Bugzilla. This may reveal sensitive information such as attachment files or may allow the attacker to bypass cross-site request-forgery protection by predicting random token values. Other attacks may also be possible.

This issue affects Bugzilla 3.0.7, 3.2.1, and 3.3.2 when run under mod_perl.

Bugzilla Pseudo-Random Number Generator Shared Seed Vulnerability

An attacker can exploit this issue via a browser.

Bugzilla Pseudo-Random Number Generator Shared Seed Vulnerability

Solution:
Updates are available. Please see the references for more information.

Bugzilla Pseudo-Random Number Generator Shared Seed Vulnerability

References:

• Bug 476594 - [SECURITY] Calling srand() at startup time in mod_perl makes the (Mozilla)
  
• 3.2.1, 3.0.7, and 3.3.2 Security Advisory (Mozilla)
  
• Bugzilla Homepage (Mozilla)
  
• Security Advisory for Bugzilla 3.2.1, 3.0.7, and 3.3.2 ([email protected])