Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is not set in the EGD_PATH variable, which allows local users to reduce the cryptographic strength of certain operations by modifying the file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Joshua Chamas Crypt::SSLeay Perl模块不安全信息熵源漏洞
Vulnerability Description
libnet-ssleay-perl的1.25之前版本中的SSLeay.pm如果在EGD_PATH变量中未设置源,使用/tmp/entropy文件为熵,本地用户可以通过修改此文件来减少某些操作的密码强度。
CVSS Information
N/A
Vulnerability Type
N/A