PT-2014-9126 · Perl · Perl-Authen-Captcha

Publicado 2014-04-09 · Atualizado 2014-04-09

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions perl-Authen-Captcha versions prior to the version that includes the fix

Description The issue concerns the generation of the public string for the captcha, which was previously a checksum of the secret string, making it easy to break. This has been fixed by producing a random filename for the captcha.

Recommendations For versions prior to the fixed version, update to the new version of perl-Authen-Captcha that produces a random filename for the captcha.

Identificadores relacionados

MGASA-2014-0167

Produtos afetados

Perl-Authen-Captcha

Referências · 4

• https://bugs.mageia.org/show_bug.cgi?id=13165 · Nota
• https://advisories.mageia.org/MGASA-2014-0167.html · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2014-0167 · Aviso do Fabricante
• https://lists.fedoraproject.org/pipermail/package-announce/2014-April/131155.html · Aviso do Fabricante