CVE-2009-0255

7.5 highEPSS 9.4%

High (7.5). EPSS 9.4% chance of exploitation in the next 30 days.

The System extension Install tool in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 creates the encryption key with an insufficiently random seed, which makes it easier for attackers to crack the key.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 9.4% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-330
Published: 2009-01-22
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

debian:debian_linux
typo3:typo3

References

http://secunia.com/advisories/33617
http://secunia.com/advisories/33679
http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/
http://www.debian.org/security/2009/dsa-1711
http://www.securityfocus.com/bid/33376

Check your stack JSON