CVE-2012-2681
published 2012-09-28CVE-2012-2681: Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, uses predictable random numbers to generate session keys, which…
PriorityP426medium5.8CVSS 2.0
AVNACMAuNCPIPAN
EPSS
2.20%
80.6th percentile
Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, uses predictable random numbers to generate session keys, which makes it easier for remote attackers to guess the session key.
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | enterprise_mrg | — | — |
| trevor_mckay | cumin | <= 0.1.5192-4 | — |
| trevor_mckay | cumin | — | — |
| trevor_mckay | cumin | — | — |
| trevor_mckay | cumin | — | — |
| trevor_mckay | cumin | — | — |
| trevor_mckay | cumin | — | — |
| trevor_mckay | cumin | — | — |
| trevor_mckay | cumin | — | — |
| trevor_mckay | cumin | — | — |
| zendframework | zendframework1 | >= 0 < 1.12.4 | 1.12.4 |
| zendframework | zendopenid | >= 0 < 2.0.2 | 2.0.2 |
| zendframework | zendrest | >= 0 < 2.0.2 | 2.0.2 |
| zendframework | zendservice-amazon | >= 0 < 2.0.3 | 2.0.3 |
| zendframework | zendservice-api | >= 0 < 1.0.0 | 1.0.0 |
| zendframework | zendservice-audioscrobbler | >= 0 < 2.0.2 | 2.0.2 |
| zendframework | zendservice-nirvanix | >= 0 < 2.0.2 | 2.0.2 |
| zendframework | zendservice-slideshare | >= 0 < 2.0.2 | 2.0.2 |
| zendframework | zendservice-technorati | >= 0 < 2.0.2 | 2.0.2 |
| zendframework | zendservice-windowsazure | >= 0 < 2.0.2 | 2.0.2 |
CVSS provenance
nvdv2.05.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
ghsa5.0MEDIUM
vendor_redhat5.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
cumin: weak session keys
vendor_redhat·2012-09-19·CVSS 5.8
CVE-2012-2681 [MEDIUM] cumin: weak session keys
cumin: weak session keys
Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, uses predictable random numbers to generate session keys, which makes it easier for remote attackers to guess the session key.
Package: cumin (Red Hat Enterprise MRG 1) - Will not fix
GHSA
Several Zend Products Vulnerable to XXE and XEE attacks
ghsa·2022-05-14·CVSS 5.0
CVE-2014-2681 [MEDIUM] CWE-611 Several Zend Products Vulnerable to XXE and XEE attacks
Several Zend Products Vulnerable to XXE and XEE attacks
Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest, ZendService_AudioScrobbler, ZendService_Nirvanix, ZendService_SlideShare, ZendService_Technorati, and ZendService_WindowsAzure before 2.0.2, ZendService_Amazon before 2.0.3, and ZendService_Api before 1.0.0 allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, and possibly cause a denial of service (CPU and memory consumption) via an XML External Entity (XXE) attack. NOTE: this issue exists because of an incomplete fix for CVE-2012-5657.
GHSA
GHSA-w3x9-vw38-f9cq: Cumin before 0
ghsa_unreviewed·2022-05-13
CVE-2012-2681 [MEDIUM] GHSA-w3x9-vw38-f9cq: Cumin before 0
Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, uses predictable random numbers to generate session keys, which makes it easier for remote attackers to guess the session key.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2012-2680 CVE-2012-2681 CVE-2012-2683 CVE-2012-2684 CVE-2012-2685 CVE-2012-2734 CVE-2012-2735 CVE-2012-3459 cumin various flaws [fedora-all]
bugzilla·2012-09-19·CVSS 5.0
CVE-2012-2680 [MEDIUM] CVE-2012-2680 CVE-2012-2681 CVE-2012-2683 CVE-2012-2684 CVE-2012-2685 CVE-2012-2734 CVE-2012-2735 CVE-2012-3459 cumin various flaws [fedora-all]
CVE-2012-2680 CVE-2012-2681 CVE-2012-2683 CVE-2012-2684 CVE-2012-2685 CVE-2012-2734 CVE-2012-2735 CVE-2012-3459 cumin various flaws [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.
For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please include this bug ID and the
bug IDs of this bug's parent bugs filed against the "Security Response"
product (the top-level CVE bugs). Please mention the CVE IDs being fixed
in the RPM changelog when available.
Bodhi update submiss
Bugzilla
CVE-2012-2681 cumin: weak session keys
bugzilla·2012-06-01·CVSS 5.8
CVE-2012-2681 [MEDIUM] CVE-2012-2681 cumin: weak session keys
CVE-2012-2681 cumin: weak session keys
Florian Weimer reported a flaw in cumin that would cause it to create weak session keys. The wooly.util.unique_id() uses the random.getrandbits() function to generate the session keys, however random.getrandbits() leaks state and can eventually become predictable (according to the Python documentation it uses the Mersenne Twister algorithm).
To create truly unique session keys, wooly.util.unique_id() should open /dev/urandom and read 16 bytes from there.
Discussion:
There is a fix for this in revision 5400 on the cumin trunk.
Here is the diff:
def unique_id():
- bits0 = random.getrandbits(32)
- bits1 = random.getrandbits(32)
- bits2 = random.getrandbits(32)
- bits3 = random.getrandbits(32)
- return "%08x-%08x-%08x-%08x" % (bits0, bits1, bits2,
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=827558http://rhn.redhat.com/errata/RHSA-2012-1278.htmlhttp://rhn.redhat.com/errata/RHSA-2012-1281.htmlhttp://secunia.com/advisories/50660http://www.securityfocus.com/bid/55618https://exchange.xforce.ibmcloud.com/vulnerabilities/78771http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=827558http://rhn.redhat.com/errata/RHSA-2012-1278.htmlhttp://rhn.redhat.com/errata/RHSA-2012-1281.htmlhttp://secunia.com/advisories/50660http://www.securityfocus.com/bid/55618https://exchange.xforce.ibmcloud.com/vulnerabilities/78771
2012-09-28
Published