NVD

Id
16301  
Name
CVE-2010-5066  
Description
The createRandomPassword function in includes/functions_common.php in Virtual War (aka VWar) 1.6.1 R2 uses a small range of values to select the seed argument for the PHP mt_srand function, which makes it easier for remote attackers to determine randomly generated passwords via a brute-force attack.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2012-10-08  
Modified Date
2012-10-08  
Seq
2010-5066  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
91699 16301 CVE-2010-5066 http://dmcdonald.net/vwar.txt  View
91700 16301 CVE-2010-5066 20100822 VWar 1.6.1 R2 Multiple Remote Vulnerabilities  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29072 JVNDB-2012-004779 Virtual War の includes/functions_common.php におけるパスワードを検出される脆弱性 Virtual War の includes/functions_common.php 内の createRandomPassword 関数には、PHP mt_srand 関数の seed 引数に限られた範囲の値を用いるため、ランダムに生成されたパスワードを検出される脆弱性が存在します。 CVE-2010-5066 47646 CVE-2010-5066 16301 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004779.html 2012-10-08 2012-10-10 View