NVD

Id
10207  
Name
CVE-2011-3599  
Description
The Crypt::DSA (aka Crypt-DSA) module 1.17 and earlier for Perl, when /dev/random is absent, uses the Data::Random module, which makes it easier for remote attackers to spoof a signature, or determine the signing key of a signed message, via a brute-force attack.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-10-10  
Modified Date
2011-10-20  
Seq
2011-3599  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
58454 10207 CVE-2011-3599 [oss-security] 20111005 CVE Request -- perl-Crypt-DSA -- Cryptographically insecure method used for random numbers generation on systems without /dev/random  View
58455 10207 CVE-2011-3599 [oss-security] 20111005 Re: CVE Request -- perl-Crypt-DSA -- Cryptographically insecure method used for random numbers generation on systems without /dev/random  View
58456 10207 CVE-2011-3599 49928  View
58457 10207 CVE-2011-3599 https://bugzilla.redhat.com/show_bug.cgi?id=743567  View
58458 10207 CVE-2011-3599 https://rt.cpan.org/Public/Bug/Display.html?id=71421  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32131 JVNDB-2011-002371 Perl モジュール Crypt::DSA における署名を偽装される脆弱性 Perl モジュール Crypt::DSA には、/dev/random が存在しないときに、Data::Random モジュールを利用すると、署名、または署名付きメッセージの署名キーを偽装される脆弱性が存在します。 CVE-2011-3599 51506 CVE-2011-3599 10207 5.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002371.html 2011-10-10 2011-10-14 View