Exploit for Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Openssl

Debian OpenSSL Predictable PRNG - - - Links Original UR...

CVE-2013-2803

ProSoft RadioLinx ControlScape before 6.00.040 uses a deficient PRNG algorithm and seeding strategy for passphrases, which makes it easier for remote attackers to obtain access via a brute-force attack...

Design/Logic Flaw

ProSoft RadioLinx ControlScape before 6.00.040 uses a deficient PRNG algorithm and seeding strategy for passphrases, which makes it easier for remote attackers to obtain access via a brute-force attack...

CVE-2013-2803

ProSoft RadioLinx ControlScape before 6.00.040 uses a deficient PRNG algorithm and seeding strategy for passphrases, which makes it easier for remote attackers to obtain access via a brute-force attack...

CVE-2013-2803

CVE-2013-2803 affects ProSoft RadioLinx ControlScape before version 6.00.040. The issue is a cryptographically weak PRNG seed/seed strategy (CRuntime srand/rand) used to generate passphrases, enabling an attacker to forecast generated passwords and perform expedited brute-force access. Descriptio...

CVE-2013-2803: Undefined Security Weakness

ProSoft RadioLinx ControlScape before 6.00.040 uses a deficient PRNG algorithm and seeding strategy for passphrases, which makes it easier for remote attackers to obtain access via a brute-force attack...

PT-2013-3942

Name of the Vulnerable Software and Affected Versions ProSoft RadioLinx ControlScape versions prior to 6.00.040 Description The issue is related to a deficient PRNG algorithm and seeding strategy for passphrases. This deficiency makes it easier for remote attackers to obtain access via a...

WS-2013-0242

In “signalapp/Signal-Android” versions before 1.0 are using insecure algorithm for generating random numbers PRNG, which may allow attackers to spoof identity keys...

Oracle Linux 5 : ruby (ELSA-2012-0070)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0070 advisory. - Properly initialize the random number generator when forking new process ruby-1.8.7-CVE-2011-3009.patch - Related: rhbz768829 Tenable has extracted t...

ProSoft Technology RadioLinx ControlScape PRNG Vulnerability

OVERVIEW Lucas Apa and Carlos Mario Penagos Hollman, security researchers with IOActive, have identified a weak pseudo-random number generator PRNG seed in the ProSoft Technology RadioLinx ControlScape application software. ProSoft Technology has produced a new firmware patch that mitigates this...

KDE Paste applet weak password generation

Weak PRNG...

PostgreSQL multiple security vulnerabilities

DoS, weak PRNG, privilege escalation...

Scientific Linux Security Update : ruby on SL4.x, SL5.x i386/x86_64 (20120130)

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to do system management tasks. A denial of service flaw was found in the implementation of associative arrays hashes in Ruby. An attacker able to supply a large number of inputs to a...

Scientific Linux Security Update : ruby on SL6.x i386/x86_64

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to do system management tasks. It was found that Ruby did not reinitialize the PRNG pseudorandom number generator after forking a child process. This could eventually lead to the PRN...

CentOS Update for ruby CESA-2012:0070 centos5

Check for the Version of ruby OpenVAS Vulnerability Test CentOS Update for ruby CESA-2012:0070 centos5 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS Update for irb CESA-2012:0070 centos4

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-2808 : Android 4.0.4 DNS poisoning vulnerability Exposed

Android's DNS resolver is vulnerable to DNS poisoning due to weak randomness in its implementation. Researchers Roee Hay & Roi Saltzman from IBM Application Security Research Group demonstrate that how an attacker can successfully guess the nonce of the DNS request with a probability thatis su...

RedHat Update for ruby RHSA-2011:1581-03

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SuSE 11.1 Security Update : ruby (SAT Patch Number 5716)

This update of ruby provides 1.8.7p357, which contains many stability fixes and bug fixes while maintaining full compatibility with the previous version. A detailailed list of changes is available from http://svn.ruby-lang.org/repos/ruby/tags/v187357/ChangeLog . The most important fixes are : -...

SuSE 11.1 Security Update : ruby (SAT Patch Number 5716)

This update of ruby provides 1.8.7p357, which contains many stability fixes and bug fixes while maintaining full compatibility with the previous version. A detailailed list of changes is available from http://svn.ruby-lang.org/repos/ruby/tags/v187357/ChangeLog . The most important fixes are : -...