CVE-2002-20002
The Net::EasyTCP package before 0.15 for Perl always uses Perl's builtin rand(), which is not a strong random number generator, for cryptographic keys.
- Score
- CVSS 3.1 5.4 Medium
- Status
- Deferred - cve@mitre.org
- Published
- 2025-01-02
- Last modified
- 2025-01-06
- Weaknesses
- CWE-338
References
- https://github.com/briandfoy/cpan-security-advisory/issues/184
- https://metacpan.org/release/MNAGUIB/EasyTCP-0.15/view/EasyTCP.pm
- https://metacpan.org/release/MNAGUIB/EasyTCP-0.26/changes
