CVE-2012-2387

devotee 0.1 patch 2 uses a 32-bit seed for generating 48-bit random numbers, which makes it easier for remote attackers to obtain the secret monikers via a brute force attack.

Score

CVSS 2.0 5.0 Medium

Status

Modified - secalert@redhat.com

Published

2012-08-20

Last modified

2024-09-17

Weaknesses

CWE-200

Affected products

• Devotee (Debian)

References

• http://www.openwall.com/lists/oss-security/2012/05/18/15
• http://www.openwall.com/lists/oss-security/2012/05/21/2
• http://www.openwall.com/lists/oss-security/2012/05/22/11