CVE catalog

CVE-2005-0106

libnet-ssleay-perl: CVE-2005-0106

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.35% · Oct 25, 2026

SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is not set in the EGD_PATH variable, which allows local users to reduce the cryptographic strength of certain operations by modifying the file.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibnet-ssleay-perlsid1.96-2fixed
Debianlibnet-ssleay-perlforky1.96-2fixed
Debianlibnet-ssleay-perltrixie1.94-3fixed
Debianlibnet-ssleay-perlbookworm1.92-2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibnet-ssleay-perlsourcesid1.25-1.1not yet assignedNot reportedNot reported
Debianlibnet-ssleay-perlsourceforky1.25-1.1not yet assignedNot reportedNot reported
Debianlibnet-ssleay-perlsourcetrixie1.25-1.1not yet assignedNot reportedNot reported
Debianlibnet-ssleay-perlsourcebookworm1.25-1.1not yet assignedNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libnet-ssleay-perl]Fixed

    Source package: [libnet-ssleay-perl]

    Details (2)

    • 1.92-2+b1 · amd64 · bookworm

      Fixed · Fixed: 1.25-1.1

      dsa · libnet-ssleay-perl · debian · bookworm; dsa · libnet-ssleay-perl · debian · 12

    • 1.92-2+b1 · arm64 · bookworm

      Fixed · Fixed: 1.25-1.1

      dsa · libnet-ssleay-perl · debian · bookworm; dsa · libnet-ssleay-perl · debian · 12

[Debian 13 (Trixie)]

  • [libnet-ssleay-perl]Fixed
    Details (2)

    • 1.94-3 · amd64 · trixie

      Fixed · Fixed: 1.25-1.1

      dsa · libnet-ssleay-perl · debian · 13

    • 1.94-3 · arm64 · trixie

      Fixed · Fixed: 1.25-1.1

      dsa · libnet-ssleay-perl · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]