reseed seeds random numbers from an insecure HTTP request to random.org during installation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a man-in-the-middle attack.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Reseed | Reseed_project | - (including) | - (including) |
| Reseed | Ubuntu | hardy | * |
| Reseed | Ubuntu | lucid | * |
| Reseed | Ubuntu | maverick | * |
| Reseed | Ubuntu | natty | * |
References
- http://www.openwall.com/lists/oss-security/2011/07/06/8
- http://www.openwall.com/lists/oss-security/2014/02/08/5
- https://bugs.launchpad.net/ubuntu/+source/reseed/+bug/804594
- http://www.openwall.com/lists/oss-security/2011/07/06/8
- http://www.openwall.com/lists/oss-security/2014/02/08/5
- https://bugs.launchpad.net/ubuntu/+source/reseed/+bug/804594