CVE-2009-2158

Name of the Vulnerable Software and Affected Versions TorrentTrader Classic version 1.09

Description The issue allows remote attackers to obtain a password via a brute-force attack because the account-recover.php file chooses random passwords from an insufficiently large set.

Recommendations For TorrentTrader Classic version 1.09, consider modifying the account-recover.php file to generate random passwords from a larger set to prevent brute-force attacks. As a temporary workaround, restrict access to the account-recover.php file until a more secure password generation mechanism is implemented.