CVE-2006-0633

State: Published
Severity: Not scored
Published: Feb 10, 2006
Updated: Sep 16, 2024
Reserved: Feb 10, 2006

Description

The make_password function in ipsclass.php in Invision Power Board (IPB) 2.1.4 uses random data generated from partially predictable seeds to create the authentication code that is sent by e-mail to a user with a lost password, which might make it easier for remote attackers to guess the code and change the password for an IPB account, possibly involving millions of requests.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

http://forums.invisionpower.com/lofiversion/index.php/t200085.html
http://www.r-security.net/tutorials/view/readtutorial.php?id=4

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.