PT-2014-9126 · Perl · Perl-Authen-Captcha

Published 2014-04-09 · Updated 2014-04-09

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions perl-Authen-Captcha versions prior to the version that includes the fix

Description The issue concerns the generation of the public string for the captcha, which was previously a checksum of the secret string, making it easy to break. This has been fixed by producing a random filename for the captcha.

Recommendations For versions prior to the fixed version, update to the new version of perl-Authen-Captcha that produces a random filename for the captcha.

Related Identifiers

MGASA-2014-0167

Affected Products

Perl-Authen-Captcha

References · 4

• https://advisories.mageia.org/MGASA-2014-0167.html · Security Note
• https://osv.dev/vulnerability/MGASA-2014-0167 · Vendor Advisory
• https://lists.fedoraproject.org/pipermail/package-announce/2014-April/131155.html · Vendor Advisory
• https://bugs.mageia.org/show_bug.cgi?id=13165 · Note