CVE-2012-2387

2012-08-2018:00:00

redhat

www.cve.org

devotee 0.1 patch 2

32-bit seed

48-bit random numbers

remote attackers

secret monikers

brute force attack

AI Score

6.5

Confidence

Low

EPSS

0.005

Percentile

76.9%

JSON

devotee 0.1 patch 2 uses a 32-bit seed for generating 48-bit random numbers, which makes it easier for remote attackers to obtain the secret monikers via a brute force attack.

References

www.openwall.com/lists/oss-security/2012/05/18/15

www.openwall.com/lists/oss-security/2012/05/21/2

www.openwall.com/lists/oss-security/2012/05/22/11