Net::EasyTCP uses predictable random numbers to generate encryption keys
VULNERABILITYredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
Net::EasyTCP, a Perl module, used the built-in rand() function to generate encryption keys when no strong randomisation module was present. An attacker could potentially predict the keys and obtain sensitive information. Ubuntu has published notice USN-8985-1 covering the issue.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Apply the Ubuntu security update referenced in USN-8985-1 for Net::EasyTCP.
- Check whether your Perl applications use Net::EasyTCP for encrypted communications.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Ubuntu Security Notices