CVE-2012-2387: Infoleak
Published Aug 20, 2012
·Updated
devotee 0.1 patch 2 uses a 32-bit seed for generating 48-bit random numbers, which makes it easier for remote attackers to obtain the secret monikers via a brute force attack.
Affected Software
1 affected component
Debian Devotee=0.1
Event History
Aug 20, 2012
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2387?
CVE-2012-2387 is considered a medium severity vulnerability due to the potential for brute force attacks to compromise secret monikers.
2
How do I fix CVE-2012-2387?
To mitigate CVE-2012-2387, upgrade to a newer version of devotee that addresses the random number generation flaw.
3
What type of attack is associated with CVE-2012-2387?
CVE-2012-2387 is susceptible to brute force attacks that can reveal sensitive information.
4
Which software versions are affected by CVE-2012-2387?
CVE-2012-2387 affects devotee version 0.1, specifically on Debian systems.
5
Can CVE-2012-2387 be exploited remotely?
Yes, CVE-2012-2387 can be exploited remotely by attackers seeking to obtain secret monikers.