IBM Rational ClearCase GSKit Encryption Issue Vulnerability

IBM Rational ClearCase is a suite of software configuration management solutions from IBM in the United States. The solution provides version control, workspace management, parallel development support and build auditing. A security vulnerability exists in the implementation of the MSCAPI/MSCNG...

CVE-2012-2808

The PRNG implementation in the DNS resolver in Bionic in Android before 4.1.1 incorrectly uses time and PID information during the generation of random numbers for query ID values and UDP source ports, which makes it easier for remote attackers to spoof DNS responses by guessing these numbers, a...

PT-2015-3768

Name of the Vulnerable Software and Affected Versions EMC Documentum Web Development Kit WDK versions prior to 6.8 Description The issue makes it easier for remote attackers to conduct phishing attacks via brute-force attempts to predict a certain parameter value related to Webtop components, due...

Google Chrome <= 6.0.472 'Math.Random()' Random Number Generation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36185/info Google Chrome is prone to security vulnerability that may allow the application to generate weak random numbers. Successfully exploiting this issue may allow attackers to obtain sensitive information or gain...

openSUSE Security Update : tor (openSUSE-SU-2014:0143-1)

fixes potentially poor random number generation for users who 1 use OpenSSL 1.0.0 or later, 2 set 'HardwareAccel 1' in their torrc file, 3 have 'Sandy Bridge' or 'Ivy Bridge' Intel processors and 4 have no state file in their DataDirectory as would happen on first start. Users who generated relay...

CVE-2014-2251

The random-number generator on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 does not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic protection mechanisms and hijack sessions via unspecified vectors...

[SECURITY] Fedora 19 Update: numpy-1.7.2-8.fc19

NumPy is a general-purpose array-processing package designed to efficiently manipulate large multi-dimensional arrays of arbitrary records without sacrificing too much speed for small multi-dimensional arrays. NumPy is built on the Numeric code base and adds features introduced by numarray as wel...

Fedora Update for numpy FEDORA-2014-2289

Check for the Version of numpy OpenVAS Vulnerability Test Fedora Update for numpy FEDORA-2014-2289 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

MGASA-2014-0059 Updated tor package fixes security vulnerability

Tor before 0.2.4.20, when OpenSSL 1.x is used in conjunction with a certain HardwareAccel setting on Intel Sandy Bridge and Ivy Bridge platforms, does not properly generate random numbers for relay identity keys and hidden-service identity keys, which might make it easier for remote attackers to...

CVE-2013-7295

Tor before 0.2.4.20, when OpenSSL 1.x is used in conjunction with a certain HardwareAccel setting on Intel Sandy Bridge and Ivy Bridge platforms, does not properly generate random numbers for 1 relay identity keys and 2 hidden-service identity keys, which might make it easier for remote attackers...

CVE-2013-7295

Tor before 0.2.4.20, when OpenSSL 1.x is used in conjunction with a certain HardwareAccel setting on Intel Sandy Bridge and Ivy Bridge platforms, does not properly generate random numbers for 1 relay identity keys and 2 hidden-service identity keys, which might make it easier for remote attackers...

Updated drupal package fixes security vulnerabilities

Drupal's form API has built-in cross-site request forgery CSRF validation, and also allows any module to perform its own validation on the form. In certain common cases, form validation functions may execute unsafe operations CVE-2013-6385. Drupal core directly used the mtrand pseudorandom number...

Debian Security Advisory DSA 2804-1 (drupal7 - several vulnerabilities)

Multiple vulnerabilities have been discovered in Drupal, a fully-featured content management framework: Cross-site request forgery, insecure pseudo random number generation, code execution, incorrect security token validation and cross-site scripting. In order to avoid the remote code execution...

Race condition

The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator PRNG before allowing a child process to access it, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging a race condition in which a...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20131022)

A flaw was found in the way the Linux kernel handled the creation of temporary IPv6 addresses. If the IPv6 privacy extension was enabled /proc/sys/net/ipv6/conf/eth0/usetempaddr is set to '2', an attacker on the local network could disable IPv6 temporary address generation, leading to a potential...

PT-2013-02: Password Reset Token Prediction in FluxBB

The specialists of Positive Technologies have detected a "Password Reset Token Prediction" vulnerability in FluxBB. The vulnerability was detected in password reset token generation algorithm. FluxBB generates weak random numbers using mtrand function: function randomkey$len, $readable = false,...

Low Entropy RSA Issue in Intel EPSD Baseboard Management Controller (BMC) Firmware

Summary: There is a potential security vulnerability related to the improper generation of RSA encryption keys in EPSD Baseboard Management Controller BMC firmware. Intel is releasing updated versions of the BMC firmware to mitigate the potential vulnerability. Description: There is a potential...

[20111103] - Core - Password Change

Weak random number generation during password reset leads to possibility of changing a user's password...

Ruby Random Number Generation Local Denial Of Service Vulnerability

This host is installed with Ruby and is prone to local denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodrubyrandomnumbergenerationdosvuln.nasl 8196 2017-12-20 12:13:37Z cfischer $ Ruby Random Number Generation Local Denial Of Service Vulnerability Authors: Sooraj KS Copyrigh...

Ruby Random Number Generation Local DoS Vulnerability (Jul 2011)

Ruby is prone to a local denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ruby-lang:ruby";...