CVE-2012-6661

NameCVE-2012-6661
DescriptionZope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, does not reseed the pseudo-random number generator (PRNG), which makes it easier for remote attackers to guess the value via unspecified vectors. NOTE: this issue was SPLIT from CVE-2012-5508 due to different vulnerability types (ADT2).
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
zope2.12source(unstable)2.12.26-1
zope2.13source(unstable)(not affected)

Notes

- zope2.13 <not-affected> (Fixed before initial upload in upstream version 2.13.19)
CVE SPLIT from CVE-2012-5508

Search for package or bug name: Reporting problems