CVE-2012-2681
First published: Fri Sep 28 2012(Updated: )
Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, uses predictable random numbers to generate session keys, which makes it easier for remote attackers to guess the session key.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Trevor McKay Cumin | <=0.1.5192-4 | |
| Trevor McKay Cumin | =0.1.3160-1 | |
| Trevor McKay Cumin | =0.1.4369-1 | |
| Trevor McKay Cumin | =0.1.4410-2 | |
| Trevor McKay Cumin | =0.1.4494-1 | |
| Trevor McKay Cumin | =0.1.4794-1 | |
| Trevor McKay Cumin | =0.1.4916-1 | |
| Trevor McKay Cumin | =0.1.5098-2 | |
| Trevor McKay Cumin | =0.1.5192-1 | |
| Red Hat Enterprise MRG | =2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2012-2681?
CVE-2012-2681 is classified as a high-severity vulnerability due to its potential to allow remote attackers to guess session keys.
How do I fix CVE-2012-2681?
To fix CVE-2012-2681, upgrade to a version of Cumin that is 0.1.5444 or later.
What software is affected by CVE-2012-2681?
CVE-2012-2681 affects versions of Cumin prior to 0.1.5444, including multiple specific versions like 0.1.3160-1 and others.
What types of attacks can exploit CVE-2012-2681?
CVE-2012-2681 can be exploited for session key guessing attacks, allowing unauthorized access to sessions.
Is CVE-2012-2681 still a concern for current systems?
Yes, CVE-2012-2681 remains a concern for systems using vulnerable versions of Cumin, particularly in Red Hat Enterprise Messaging.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/author
- agent/description
- agent/softwarecombine
- agent/tags
- agent/event
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/trevor mckay
- canonical/trevor mckay cumin
- version/trevor mckay cumin/0.1.5192-4
- version/trevor mckay cumin/0.1.3160-1
- version/trevor mckay cumin/0.1.4369-1
- version/trevor mckay cumin/0.1.4410-2
- version/trevor mckay cumin/0.1.4494-1
- version/trevor mckay cumin/0.1.4794-1
- version/trevor mckay cumin/0.1.4916-1
- version/trevor mckay cumin/0.1.5098-2
- version/trevor mckay cumin/0.1.5192-1
- vendor/redhat
- canonical/redhat enterprise mrg
- version/redhat enterprise mrg/2.0