CVE-2011-2190

The generate_admin_password function in Cherokee before 1.2.99 uses time
and PID values for seeding of a random number generator, which makes it
easier for local users to determine admin passwords via a brute-force
attack.

Bugs

• <http://code.google.com/p/cherokee/issues/detail?id=1212&gt;
• <https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2190&gt;