NVD

Id
44198  
Name
CVE-2012-2387  
Description
devotee 0.1 patch 2 uses a 32-bit seed for generating 48-bit random numbers, which makes it easier for remote attackers to obtain the secret monikers via a brute force attack.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-08-20  
Modified Date
2012-08-21  
Seq
2012-2387  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
221997 44198 CVE-2012-2387 [oss-security] 20120518 CVE id request: devotee (debian vote engine) cryptographically weak random numbers permit discovery of secret ballot submissions  View
221998 44198 CVE-2012-2387 [oss-security] 20120521 Re: CVE id request: devotee (debian vote engine) cryptographically weak random numbers permit discovery of secret ballot submissions  View
221999 44198 CVE-2012-2387 [oss-security] 20120522 CVE id request: devotee (debian vote engine) cryptographically weak random numbers permit discovery of secret ballot submissions  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28066 JVNDB-2012-003773 devotee における秘密のあだ名を取得される脆弱性 devotee は、48 ビットの乱数を生成するために 32 ビットのシードを使用するため、秘密のあだ名 (secret monikers) を取得される脆弱性が存在します。 CVE-2012-2387 55625 CVE-2012-2387 44198 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003773.html 2012-08-20 2012-08-22 View