Mandrake Linux Security Advisory : perl-Net_SSLeay (MDKSA-2006:023)

Javier Fernandez-Sanguino Pena discovered that the perl Net::SSLeay module used the file /tmp/entropy as a fallback entropy source if a proper source was not set via the environment variable EGDPATH. This could potentially lead to weakened cryptographic operations if an attacker was able to provi...

Weak Net::SSLeay perl module encryption

/tmp/entropy file is used for entropy gathering if no entropy source is specified with EGDPATH envoronment variable. Attacker can fille file with known data...

CVE-2005-0106

SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is not set in the EGDPATH variable, which allows local users to reduce the cryptographic strength of certain operations by modifying the file...