CVE-2012-2387

Published: 20 August 2012

devotee 0.1 patch 2 uses a 32-bit seed for generating 48-bit random numbers, which makes it easier for remote attackers to obtain the secret monikers via a brute force attack.

Notes

<itp> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=470995

Status

References

• http://www.openwall.com/lists/oss-security/2012/05/22
• https://www.cve.org/CVERecord?id=CVE-2012-2387
• NVD
• Launchpad
• Debian

Bugs

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=470995