• info
• discussion
• exploit
• solution
• references

L2TPD Weak Random Number Generator Seeding Vulnerability

Solution:
An updated version is available:


l2tpd l2tpd 0.62

• l2tpd l2tpd-0.68.tar.gz
  http://www.l2tpd.org/downloads/l2tpd-0.68.tar.gz

l2tpd l2tpd 0.63

• l2tpd l2tpd-0.68.tar.gz
  http://www.l2tpd.org/downloads/l2tpd-0.68.tar.gz

l2tpd l2tpd 0.64

• l2tpd l2tpd-0.68.tar.gz
  http://www.l2tpd.org/downloads/l2tpd-0.68.tar.gz

l2tpd l2tpd 0.65

• l2tpd l2tpd-0.68.tar.gz
  http://www.l2tpd.org/downloads/l2tpd-0.68.tar.gz

l2tpd l2tpd 0.66

• l2tpd l2tpd-0.68.tar.gz
  http://www.l2tpd.org/downloads/l2tpd-0.68.tar.gz

l2tpd l2tpd 0.67

• Debian l2tpd_0.67-1.1_alpha.deb
  http://security.debian.org/pool/updates/main/l/l2tpd/l2tpd_0.67-1.1_al pha.deb


• Debian l2tpd_0.67-1.1_arm.deb
  http://security.debian.org/pool/updates/main/l/l2tpd/l2tpd_0.67-1.1_ar m.deb


• Debian l2tpd_0.67-1.1_hppa.deb
  http://security.debian.org/pool/updates/main/l/l2tpd/l2tpd_0.67-1.1_hp pa.deb


• Debian l2tpd_0.67-1.1_i386.deb
  http://security.debian.org/pool/updates/main/l/l2tpd/l2tpd_0.67-1.1_i3 86.deb


• Debian l2tpd_0.67-1.1_ia64.deb
  http://security.debian.org/pool/updates/main/l/l2tpd/l2tpd_0.67-1.1_ia 64.deb


• Debian l2tpd_0.67-1.1_m68k.deb
  http://security.debian.org/pool/updates/main/l/l2tpd/l2tpd_0.67-1.1_m6 8k.deb


• Debian l2tpd_0.67-1.1_mips.deb
  http://security.debian.org/pool/updates/main/l/l2tpd/l2tpd_0.67-1.1_mi ps.deb


• Debian l2tpd_0.67-1.1_mipsel.deb
  http://security.debian.org/pool/updates/main/l/l2tpd/l2tpd_0.67-1.1_mi psel.deb


• Debian l2tpd_0.67-1.1_powerpc.deb
  http://security.debian.org/pool/updates/main/l/l2tpd/l2tpd_0.67-1.1_po werpc.deb


• Debian l2tpd_0.67-1.1_s390.deb
  http://security.debian.org/pool/updates/main/l/l2tpd/l2tpd_0.67-1.1_s3 90.deb


• Debian l2tpd_0.67-1.1_sparc.deb
  http://security.debian.org/pool/updates/main/l/l2tpd/l2tpd_0.67-1.1_sp arc.deb


• l2tpd l2tpd-0.68.tar.gz
  http://www.l2tpd.org/downloads/l2tpd-0.68.tar.gz