819
Reference Description
CVE-2008-2108 Chain: insufficient precision causes extra zero bits to be assigned, reducing
entropy for an API function that generates random numbers.
https://www.cve.org/CVERecord?id=CVE-2008-2108
CVE-2008-2108 Chain: insufficient precision (CWE-1339) in random-number generator causes
some zero bits to be reliably generated, reducing the amount of entropy
(CWE-331)
https://www.cve.org/CVERecord?id=CVE-2008-2108
CVE-2008-2020 CAPTCHA implementation does not produce enough different images,
allowing bypass using a database of all possible checksums.
https://www.cve.org/CVERecord?id=CVE-2008-2020
CVE-2008-0087 DNS client uses predictable DNS transaction IDs, allowing DNS spoofing.
https://www.cve.org/CVERecord?id=CVE-2008-0087
CVE-2008-0141 Application generates passwords that are based on the time of day.
https://www.cve.org/CVERecord?id=CVE-2008-0141
Functional Areas
• Cryptography
• Authentication
• Session Management
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 254 7PK - Security Features 700 2314
MemberOf 723 OWASP Top Ten 2004 Category A2 - Broken Access
Control
711 2335
MemberOf 747 CERT C Secure Coding Standard (2008) Chapter 14 -
Miscellaneous (MSC)
734 2350
MemberOf 753 2009 Top 25 - Porous Defenses 750 2353
MemberOf 808 2010 Top 25 - Weaknesses On the Cusp 800 2355
MemberOf 861 The CERT Oracle Secure Coding Standard for Java
(2011) Chapter 18 - Miscellaneous (MSC)
844 2370
MemberOf 867 2011 Top 25 - Weaknesses On the Cusp 900 2372
MemberOf 883 CERT C++ Secure Coding Section 49 - Miscellaneous
(MSC)
868 2381
MemberOf 905 SFP Primary Cluster: Predictability 888 2388
MemberOf 1003 Weaknesses for Simplified Mapping of Published
Vulnerabilities
1003 2576
MemberOf 1152 SEI CERT Oracle Secure Coding Standard for Java -
Guidelines 49. Miscellaneous (MSC)
1133 2453
MemberOf 1169 SEI CERT C Coding Standard - Guidelines 14.
Concurrency (CON)
1154 2462
MemberOf 1170 SEI CERT C Coding Standard - Guidelines 48.
Miscellaneous (MSC)
1154 2463
MemberOf 1346 OWASP Top Ten 2021 Category A02:2021 -
Cryptographic Failures
1344 2488
MemberOf 1366 ICS Communications: Frail Security in Protocols 1358 2503
MemberOf 1414 Comprehensive Categorization: Randomness 1400 2543
Notes
Relationship
CWE Version 4.14
CWE-330: Use of Insufficiently Random Values
CWE-330: Use of Insufficiently Random Values