The createRandomPassword function in includes/functions_common.php in Virtual War (aka VWar) 1.6.1 R2 uses a small range of values to select the seed argument for the PHP mt_srand function, which makes it easier for remote attackers to determine randomly generated passwords via a brute-force attack.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2012-10-08T10:00:00Z

Updated: 2024-09-16T16:52:37.615Z

Reserved: 2011-11-27T00:00:00Z

Link: CVE-2010-5066

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2012-10-08T10:47:44.760

Modified: 2024-11-21T01:22:25.437

Link: CVE-2010-5066

cve-icon Redhat

No data.