Описание
Password Generator (aka Pwgen) before 2.07 uses weak pseudo generated numbers when /dev/urandom is unavailable, which makes it easier for context-dependent attackers to guess the numbers.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.06 (включая)
cpe:2.3:a:pwgen_project:pwgen:*:*:*:*:*:*:*:*
EPSS
Процентиль: 82%
0.02166
Низкий
5 Medium
CVSS2
Дефекты
CWE-310
Связанные уязвимости
ubuntu
почти 12 лет назад
Password Generator (aka Pwgen) before 2.07 uses weak pseudo generated numbers when /dev/urandom is unavailable, which makes it easier for context-dependent attackers to guess the numbers.
debian
почти 12 лет назад
Password Generator (aka Pwgen) before 2.07 uses weak pseudo generated ...
github
больше 4 лет назад
Password Generator (aka Pwgen) before 2.07 uses weak pseudo generated numbers when /dev/urandom is unavailable, which makes it easier for context-dependent attackers to guess the numbers.
CVSS3: 9.8
altlinux
около 7 лет назад
ALT-PU-2019-2538: package `pwgen` update to version 2.08-alt1
EPSS
Процентиль: 82%
0.02166
Низкий
5 Medium
CVSS2
Дефекты
CWE-310