FreeBSD : pycrypto -- PRNG reseed race condition (c0f122e2-3897-11e3-a084-3c970e169bc2)
Medium Nessus Plugin ID 70517
SynopsisThe remote FreeBSD host is missing one or more security-related updates.
DescriptionDwayne Litzenberger reports :
In PyCrypto before v2.6.1, the Crypto.Random pseudo-random number generator (PRNG) exhibits a race condition that may cause it to generate the same 'random' output in multiple processes that are forked from each other. Depending on the application, this could reveal sensitive information or cryptographic keys to remote attackers.
SolutionUpdate the affected packages.