Medium · 5.4 CVE-2002-20002 EUVD-2002-2426GHSA-pm3j-mqcc-rjqr

The Net::EasyTCP package before 0.15 for Perl always uses Perl's builtin rand(), which is not a strong random number generator, for cryptog…

Published Jan 2, 2025 · Updated Jan 6, 2025 · Assigned by mitre

Description

The Net::EasyTCP package before 0.15 for Perl always uses Perl's builtin rand(), which is not a strong random number generator, for cryptographic keys.

References

https://metacpan.org/release/MNAGUIB/EasyTCP-0.26/changes
https://github.com/briandfoy/cpan-security-advisory/issues/184
https://metacpan.org/release/MNAGUIB/EasyTCP-0.15/view/EasyTCP.pm