TYPO3 is vulnerable to insecure randomness during hash generation in forgot password function

Description

References

• nvd.nist.gov/vuln/detail/CVE-2010-3670 · ADVISORY
• TYPO3/typo3 commit 09ab776 · WEB
• TYPO3/typo3 commit c03e944 · WEB
• bugs.debian.org/cgi-bin/bugreport.cgi · WEB
• TYPO3-CMS/frontend · PACKAGE
• security-tracker.debian.org/tracker/CVE-2010-3670 · WEB
• typo3.org/security/advisory/typo3-sa-2010-012 · WEB

Weitere Schwachstellen in typo3/cms-frontend

• CVE-2010-3667MITTEL 5.3TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Spam Abuse in the native form content element.
• CVE-2010-5098NIEDRIG 3.5Cross-site scripting (XSS) vulnerability in the FORM content object in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5…
• CVE-2010-5097NIEDRIG 2.6Cross-site scripting (XSS) vulnerability in the click enlarge functionality in TYPO3 4.3.x before 4.3.9 and 4.4.x before 4.4.5 when the cach…