Information disclosure in Empire Server

CVE-2008-3168

The files utility in Empire Server before 4.3.15 discloses the world creation time, which makes it easier for attackers to determine the PRNG seed.

Vulnerability class: Information Disclosure

EPSS: 0.010 (60.6th percentile) — read the EPSS interpretation.

Affected products

  • Empire_server — versions 4.2.10, 4.2.11, 4.2.12
  • N/a — versions n/a

Weakness classification (CWE)

References