CVE-2010-5066

The createRandomPassword function in includes/functions_common.php in Virtual War (aka VWar) 1.6.1 R2 uses a small range of values to select the seed argument for the PHP mt_srand function, which makes it easier for remote attackers to determine randomly generated passwords via a brute-force attack.
Configurations

Configuration 1 (hide)

cpe:2.3:a:vwar:virtual_war:1.6.1:r2:*:*:*:*:*:*

History

No history.

Information

Published : 2012-10-08 10:47

Updated : 2024-02-28 12:00


NVD link : CVE-2010-5066

Mitre link : CVE-2010-5066

CVE.ORG link : CVE-2010-5066


JSON object : View

Products Affected

vwar

  • virtual_war
CWE
CWE-310

Cryptographic Issues