what you don't know can hurt you
Showing 1 - 1 of 1 RSS Feed

Files

PHP 5.3.2 Weak Random Number Generator
Posted Mar 30, 2010
Authored by Andreas Bogk

PHP versions 5.3.2 and below utilize a cryptographically weak random number generator to produce session ID information. Additionally, not enough entropy is used for the initial seeding of the RNG, and some of the entropy can leak by careless use of the uniqid() PHP function. Under certain circumstances, these individual weaknesses interact and reduce the number of possible values of a PHP session ID so much that exhaustive search for a valid session ID against the web server becomes feasible.

tags | advisory, web, php
MD5 | 1d8e9050fb0ec95decdb8f4a483fc948
Page 1 of 1
Back1Next

Top Authors In Last 30 Days

Recent News

News RSS Feed
Ethereum Smart Contracts Exploitation Using Right-To-Left Override Character
Posted May 23, 2019

tags | headline, flaw, cryptography
Mozilla Patches 24 Firefox Vulnerabilities
Posted May 23, 2019

tags | headline, flaw, patch, mozilla, firefox
Would You Pay $1 Million For A Laptop Full Of Malware?
Posted May 23, 2019

tags | headline, malware
Why A Windows Flaw Patched 9 Days Ago Is Still Spooking The Internet
Posted May 23, 2019

tags | headline, microsoft, flaw, patch
UK Says It Warned 16 NATO Allies Of Russian Hacking Activities
Posted May 23, 2019

tags | headline, hacker, government, britain, russia, fraud, cyberwar
Millions Of Golfers Land In Privacy Hazard After Cloud Misconfig
Posted May 22, 2019

tags | headline, privacy, data loss
Team Viewer Hit By Chinese Hackers In 2016
Posted May 22, 2019

tags | headline, hacker, privacy, china, data loss
Huawei Faces Break With UK Chip Giant ARM
Posted May 22, 2019

tags | headline, government, china, spyware, backdoor
Google G Suite Glitch Left Some Passwords Stored In Plain Text For 14 Years
Posted May 22, 2019

tags | headline, flaw, google, password
Unsecure Chtrbox AWS Database Exposes Data On 49 Million Instagram Influencers, Accounts
Posted May 21, 2019

tags | headline, privacy, amazon, data loss, facebook
View More News →
packet storm

© 2019 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close