2 matches found
CVE-2013-4442
Pwgen (Password Generator) prior to version 2.07 was vulnerable because it used weak pseudo-random numbers when /dev/urandom was unavailable, allowing context-dependent attackers to potentially guess generated passwords. Public advisories and OSV/NVD records describe fixes in pwgen-2.07 and later...
5CVSS5.9AI score0.02166EPSS
SaveExploits0References9Affected Software1
PT-2014-2795
Name of the Vulnerable Software and Affected Versions Password Generator aka Pwgen versions prior to 2.07 Description The issue arises when /dev/urandom is unavailable, causing the software to use weak pseudo-generated numbers. This weakness makes it easier for attackers to guess the numbers,...
5CVSS0.02166EPSS
SaveExploits0References26
20