漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id
Vulnerability Description
Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id. Apache::Session::Generate::MD5 generates session ids insecurely. The default session id generator returns a MD5 hash seeded with the built-in rand() function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage. Predicable session ids could allow an attacker to gain access to systems. Note that the libapache-session-perl package in some Debian-based Linux distributions may be patched to use Crypt::URandom.
CVSS Information
N/A
Vulnerability Type
可预测问题
Vulnerability Title
Apache::Session::Generate::MD5 安全漏洞
Vulnerability Description
Apache::Session::Generate::MD5是Apache基金会的一个会话管理模块。 Apache::Session::Generate::MD5 1.94及之前版本存在安全漏洞，该漏洞源于使用不安全的随机数生成器生成会话ID，可能导致会话ID被预测。
CVSS Information
N/A
Vulnerability Type
N/A