Description
SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is not set in the EGD_PATH variable, which allows local users to reduce the cryptographic strength of certain operations by modifying the file.
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2005-0107 | SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is not set in the EGD_PATH variable, which allows local users to reduce the cryptographic strength of certain operations by modifying the file. |
Ubuntu USN |
USN-113-1 | libnet-ssleay-perl vulnerability |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T20:57:41.236Z
Reserved: 2005-01-18T00:00:00.000Z
Link: CVE-2005-0106
No data.
Status : Modified
Published: 2005-05-03T04:00:00.000
Modified: 2026-04-16T00:27:16.627
Link: CVE-2005-0106
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD
Ubuntu USN