Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multiplication that generates a portion of zero bits during conversion due to insufficient precision, which produces 24 bits of entropy and simplifies brute force attacks against protection mechanisms that use the rand and mt_rand functions.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GENERATE_SEED macro PHP 5.2.6修复多个安全漏洞
Vulnerability Description
PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的5.2.6之前版本存在多个安全漏洞，允许恶意用户绕过安全限制、导致拒绝服务或入侵有漏洞的系统。 1) FastCGI SAPI中的安全漏洞可能导致栈溢出。 2) 处理escapeshellcmd()中不完整多字节字符时存在安全漏洞。 3) cURL中的错误可能导致绕过safe_mode限制。 4) PCRE中的边界条件错误可能允许恶意用户导致拒绝服务或入侵有漏洞的系统。
CVSS Information
N/A
Vulnerability Type
N/A