PHP 5.3.1 - LCG Entropy Security

EDB-ID:

33677


Author:

Rasmus

Type:

dos


Platform:

PHP

Date:

2010-02-26


source: https://www.securityfocus.com/bid/38430/info

PHP is prone to a security vulnerability that affects LCG (Linear Congruential) entropy.

Attackers can exploit this issue to steal sessions or other sensitive data.

Versions prior to PHP 5.2.13 are affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/33677.tar.gz