CVE-2005-3087 Information

Description

The SecureW2 3.0 TLS implementation uses weak random number generators (rand and srand from system time) during generation of the pre-master secret (PMS) which makes it easier for attackers to guess the secret and decrypt sensitive data.

Reference

http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037352.html http://secunia.com/advisories/16909

Share on: