CVE-2005-0106
Published: 3 May 2005
SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is not set in the EGD_PATH variable, which allows local users to reduce the cryptographic strength of certain operations by modifying the file.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
libnet-ssleay-perl Launchpad, Ubuntu, Debian |
dapper |
Released
(1.25-2build1)
|
| edgy |
Released
(1.25-2build1)
|
|
| feisty |
Released
(1.25-2build1)
|
|
| upstream |
Needs triage
|