Vulnerability in Securew2

CVE-2005-3087

The SecureW2 3.0 TLS implementation uses weak random number generators (rand and srand from system time) during generation of the pre-master secret (PMS), which makes it easier for attackers to guess the secret and decrypt sensitive data.

EPSS: 0.010 (58.9th percentile) — read the EPSS interpretation.

Affected products

  • Securew2 — versions 3.0
  • N/a — versions n/a

References

  • cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_FULLDISC)
  • cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)