CVE-2005-0106

N/A

Description

SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is not set in the EGD_PATH variable, which allows local users to reduce the cryptographic strength of certain operations by modifying the file.

CVE Details

CVSS v3.1 ScoreN/A

Published5/3/2005

Last Modified4/16/2026

Sourcenvd

Honeypot Sightings0

Affected Products

ubuntu:ubuntu_linux

References

http://secunia.com/advisories/18639(cve@mitre.org)

http://www.mandriva.com/security/advisories?name=MDKSA-2006:023(cve@mitre.org)

http://www.securityfocus.com/bid/13471(cve@mitre.org)

https://usn.ubuntu.com/113-1/(cve@mitre.org)

http://secunia.com/advisories/18639(af854a3a-2127-422b-91ae-364da2661108)

http://www.mandriva.com/security/advisories?name=MDKSA-2006:023(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/13471(af854a3a-2127-422b-91ae-364da2661108)

https://usn.ubuntu.com/113-1/(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.