Debian and Ubuntu keys under attack

Friday, May 16th, 2008

A recently disclosed vulnerability in widely used Linux distributions can be exploited by attackers to guess cryptographic keys, possibly leading to the forgery of digital signatures and theft of confidential information, a noted security researcher said Thursday. HD Moore, best known as the exploit researcher who created the Metasploit penetration testing ...

PHP Weak Random Number Seed Vulnerability

Wednesday, May 7th, 2008

Since version 4.2.0 PHP automatically seeds the random number generators on the first usage of rand() and mt_rand(). This is done with the help of the GENERATE_SEED() macro. Unfortunately it was discovered that the GENERATE_SEED() macro contains several problems that can lead to a weaker seed than expected. In the worst ...