Weak Net::SSLeay perl module encryption
Published:		27.01.2006
Source:		FULL-DISCLOSURE
SecurityVulns ID:		5703
Type:		local
Level:		5/10
Description:		/tmp/entropy file is used for entropy gathering if no entropy source is specified with EGD_PATH envoronment variable. Attacker can fille file with known data.

Affected:

PERL : Net::SSLeay 1.25

Original document

MANDRIVA, [Full-disclosure] [ MDKSA-2006:023 ] - Updated perl-Net_SSLeay packages fix vulnerability (27.01.2006)

Discuss:

Read or add your comments to this news (0 comments)