CVE-2010-5066

EUVD-2010-5030
The createRandomPassword function in includes/functions_common.php in Virtual War (aka VWar) 1.6.1 R2 uses a small range of values to select the seed argument for the PHP mt_srand function, which makes it easier for remote attackers to determine randomly generated passwords via a brute-force attack.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 47%
Affected Products (NVD)
VendorProductVersion
vwarvirtual_war
1.6.1:r2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://dmcdonald.net/vwar.txt
http://seclists.org/fulldisclosure/2010/Aug/235
http://dmcdonald.net/vwar.txt
http://seclists.org/fulldisclosure/2010/Aug/235