PT-2014-2795

CVE-2013-4442

·

Published

2014-12-19

·

Updated

2024-06-15

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Password Generator (aka Pwgen) versions prior to 2.07
Description The issue arises when /dev/urandom is unavailable, causing the software to use weak pseudo-generated numbers. This weakness makes it easier for attackers to guess the numbers, particularly in context-dependent attacks.
Recommendations For versions prior to 2.07, update to version 2.07 or later to resolve the issue.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2019-2538
ALT-PU-2019-2552
MGASA-2014-0535
OPENSUSE-SU-2024:10333-1
Found an issue in the description? Have something to add? Feel free to write us 👾