VDB
GCVE-110-MAGEIA-2014-167
GCVE-110-MAGEIA-2014-167
Advisory Published
An issue in previous versions of perl-Authen-Captcha is that the generated
public string (file name of the picture) for the captcha is merely a
checksum of the secret string. It is trivial to break such short strings
even using google instead of a rainbow table.
This new version of perl-Authen-Captcha fixes the problem by producing a
random filename for the captcha.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | perl-Authen-Captcha | 0 (affected), 1.24.0-1.mga3 (unaffected), 0 (affected), 1.24.0-1.mga3 (unaffected) | — |
| Mageia | gkrellm-plugins | 0 (affected), 2.3.5-10.1.mga4 (unaffected) | — |
| Mageia | perl-Authen-Captcha | 0 (affected), 1.24.0-1.mga4 (unaffected), 0 (affected), 1.24.0-1.mga4 (unaffected) | — |
References
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.