medium5.9
CVE-2011-2683
reseed seeds random numbers from an insecure HTTP request to random.org during installation, which makes it easier for remote attackers to defeat cryptographic…
Impact
reseed seeds random numbers from an insecure HTTP request to random.org during installation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a man-in-the-middle attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Reseed Project | Reseed | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2011/07/06/8
- http://www.openwall.com/lists/oss-security/2014/02/08/5
- https://bugs.launchpad.net/ubuntu/+source/reseed/+bug/804594
- http://www.openwall.com/lists/oss-security/2011/07/06/8
- http://www.openwall.com/lists/oss-security/2014/02/08/5
- https://bugs.launchpad.net/ubuntu/+source/reseed/+bug/804594