PT-2013-3141

Name of the Vulnerable Software and Affected Versions PyCrypto versions prior to 2.6.1 Description The issue is related to the Crypto.Random.atfork function, which does not properly reseed the pseudo-random number generator PRNG before allowing a child process to access it. This makes it easier f...

ProSoft Technology RadioLinx ControlScape PRNG vulnerability

Industrial automation software used worldwide to create and configure wireless radios that connect devices in environments such as oil and gas is vulnerable to attack by a hacker armed with an antenna from as far as 30 miles away. Though the vulnerability in the ProSoft Technology RadioLinx...

FreeBSD : pycrypto -- PRNG reseed race condition (c0f122e2-3897-11e3-a084-3c970e169bc2)

Dwayne Litzenberger reports : In PyCrypto before v2.6.1, the Crypto.Random pseudo-random number generator PRNG exhibits a race condition that may cause it to generate the same 'random' output in multiple processes that are forked from each other. Depending on the application, this could reveal...

Debian DSA-2781-1 : python-crypto - PRNG not correctly reseeded in some situations

A cryptographic vulnerability was discovered in the pseudo random number generator in python-crypto. In some situations, a race condition could prevent the reseeding of the generator when multiple processes are forked from the same parent. This would lead it to generate identical output on all...

[SECURITY] [DSA 2781-1] python-crypto security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2781-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez October 18, 2013 http://www.debian.org/security/faq -...

/Dev/Random PRNG in Linux Questioned

The sanctity of the dev/random random number generator used in the Linux kernel has been a hot-button issue for more than a month. A petition posted to change.org in September to remove RdRand from dev/random, for example, was met with fury from Linus Torvalds who called the developer who posted ...

Debian Security Advisory DSA 2781-1 (python-crypto - PRNG not correctly reseeded in some situations)

A cryptographic vulnerability was discovered in the pseudo random number generator in python-crypto. In some situations, a race condition could prevent the reseeding of the generator when multiple processes are forked from the same parent. This would lead it to generate identical output on all...

pycrypto -- PRNG reseed race condition

Dwayne Litzenberger reports: In PyCrypto before v2.6.1, the Crypto.Random pseudo-random number generator PRNG exhibits a race condition that may cause it to generate the same 'random' output in multiple processes that are forked from each other. Depending on the application, this could reveal...

DSA-2781-1 python-crypto - PRNG not correctly reseeded in some situations

Bulletin has no description...

ProSoft RadioLinx ControlScape PRNG Weakness

Binary data scadaradiolinxcontrolscape600040.nbin...

UBUNTU-CVE-2013-4345

Off-by-one error in the getprngbytes function in crypto/ansicprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data, leading to improper management of the state of the...

GSTOOL weak PRNG generator

Weak PRNG generator in CHIASMUS implementation...

perl Crypt::DSA weak PRNG generator

Under some conditions, weak PRNG generator is used...

Exploit for Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Openssl

Debian OpenSSL Predictable PRNG - - - Links Original UR...

CVE-2013-2803

ProSoft RadioLinx ControlScape before 6.00.040 uses a deficient PRNG algorithm and seeding strategy for passphrases, which makes it easier for remote attackers to obtain access via a brute-force attack...

Design/Logic Flaw

ProSoft RadioLinx ControlScape before 6.00.040 uses a deficient PRNG algorithm and seeding strategy for passphrases, which makes it easier for remote attackers to obtain access via a brute-force attack...

CVE-2013-2803

ProSoft RadioLinx ControlScape before 6.00.040 uses a deficient PRNG algorithm and seeding strategy for passphrases, which makes it easier for remote attackers to obtain access via a brute-force attack...

CVE-2013-2803

CVE-2013-2803 affects ProSoft RadioLinx ControlScape before version 6.00.040. The issue is a cryptographically weak PRNG seed/seed strategy (CRuntime srand/rand) used to generate passphrases, enabling an attacker to forecast generated passwords and perform expedited brute-force access. Descriptio...

PT-2013-3942

Name of the Vulnerable Software and Affected Versions ProSoft RadioLinx ControlScape versions prior to 6.00.040 Description The issue is related to a deficient PRNG algorithm and seeding strategy for passphrases. This deficiency makes it easier for remote attackers to obtain access via a...

CVE-2013-2803: Undefined Security Weakness

ProSoft RadioLinx ControlScape before 6.00.040 uses a deficient PRNG algorithm and seeding strategy for passphrases, which makes it easier for remote attackers to obtain access via a brute-force attack...