USN-8985-1: Net::EasyTCP vulnerability

It was discovered that Net::EasyTCP used the built-in Perl rand() function to generate encryption keys when no strong randomization module was present. An attacker could possibly use this issue to predict the keys and obtain sensitive information.

Quelle: Originalartikel öffnen