Description
The SecureW2 3.0 TLS implementation uses weak random number generators (rand and srand from system time) during generation of the pre-master secret (PMS), which makes it easier for attackers to guess the secret and decrypt sensitive data.
References
- 20050923 SecureW2 TLS security problem mailing-list
- 16909 third-party-advisory