CVE-2005-0106: Medium severity Ubuntu Ubuntu Linux vulnerability
SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is not set in the EGDPATH variable, which allows local users to reduce the cryptographic strength of certain operations by modifying the file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0106?
CVE-2005-0106 is considered a medium severity vulnerability due to its potential impact on cryptographic operations.
How do I fix CVE-2005-0106?
To fix CVE-2005-0106, update the libnet-ssleay-perl module to version 1.25 or later.
What systems are affected by CVE-2005-0106?
CVE-2005-0106 affects Ubuntu Linux version 5.04 and any systems using an affected version of libnet-ssleay-perl.
What is the risk of exploiting CVE-2005-0106?
Exploiting CVE-2005-0106 allows local users to weaken the cryptographic strength of certain operations by modifying the /tmp/entropy file.
Is CVE-2005-0106 related to file permissions?
Yes, CVE-2005-0106 is related to improper file permissions, as it allows local users to manipulate a critical entropy file.