CVE-2009-0255: Debian Linux

High severity, CVSS 7.5. EPSS: 9.4% chance of exploitation in the next 30 days.

The System extension Install tool in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 creates the encryption key with an insufficiently random seed, which makes it easier for attackers to crack the key.

Affected products

• Debian Debian Linux: version 4.0 only
• TYPO3 TYPO3: from 4.0, before 4.0.10 (fixed in 4.0.10); from 4.1.0, before 4.1.8 (fixed in 4.1.8); from 4.2.0, before 4.2.4 (fixed in 4.2.4)

Published 2009-01-22. Last modified 2026-06-16.