Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-2387
HistoryAug 20, 2012 - 12:00 a.m.

CVE-2012-2387

2012-08-2000:00:00
ubuntu.com
ubuntu.com
17

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.005

Percentile

76.9%

devotee 0.1 patch 2 uses a 32-bit seed for generating 48-bit random
numbers, which makes it easier for remote attackers to obtain the secret
monikers via a brute force attack.

Bugs

Notes

Author Note
jdstrand <itp> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=470995

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.005

Percentile

76.9%

Related for UB:CVE-2012-2387