CVE-2002-20002

Description

The Net::EasyTCP package before 0.15 for Perl always uses Perl's builtin rand(), which is not a strong random number generator, for cryptographic keys.

Affected Platforms

Weakness Type

CWE-338

References

• https://github.com/briandfoy/cpan-security-advisory/issues/184
• https://metacpan.org/release/MNAGUIB/EasyTCP-0.15/view/EasyTCP.pm
• https://metacpan.org/release/MNAGUIB/EasyTCP-0.26/changes