CVE-2009-0255

The System extension Install tool in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 creates the encryption key with an insufficiently random seed, which makes it easier for attackers to crack the key.

• CWE-330

• http://secunia.com/advisories/33617Broken Link, Vendor Advisory
• http://secunia.com/advisories/33679Broken Link, Vendor Advisory
• http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/Vendor Advisory
• http://www.debian.org/security/2009/dsa-1711Mailing List
• http://www.securityfocus.com/bid/33376Broken Link, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48132Third Party Advisory, VDB Entry
• http://secunia.com/advisories/33617Broken Link, Vendor Advisory
• http://secunia.com/advisories/33679Broken Link, Vendor Advisory
• http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/Vendor Advisory
• http://www.debian.org/security/2009/dsa-1711Mailing List
• http://www.securityfocus.com/bid/33376Broken Link, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48132Third Party Advisory, VDB Entry

Published

Jan 22, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-0249Katy Whitton RankEm stores sensitive information under the w…
• CVE-2009-0250Ryneezy phoSheezy 0.2 stores sensitive information under the…
• CVE-2009-0251Static code injection vulnerability in admin.php in Ryneezy …
• CVE-2009-0252Multiple SQL injection vulnerabilities in default.asp in Ent…
• CVE-2009-0253Mozilla Firefox 3.0.5 allows remote attackers to trick a use…
• CVE-2009-0254Stack-based buffer overflow in easyHDR PRO 1.60.2 allows use…
• CVE-2009-0256Session fixation vulnerability in the authentication library…
• CVE-2009-0257Multiple cross-site scripting (XSS) vulnerabilities in TYPO3…
• CVE-2009-0258The Indexed Search Engine (indexed_search) system extension …
• CVE-2009-0259The Word processor in OpenOffice.org 1.1.2 through 1.1.5 all…
• CVE-2009-0260Multiple cross-site scripting (XSS) vulnerabilities in actio…
• CVE-2009-0261Stack-based buffer overflow in EffectMatrix Total Video Play…