Security Advisories (1)
CVE-2002-20002 (2025-01-02)

The Net::EasyTCP package before 0.15 for Perl always uses Perl's builtin rand(), which is not a strong random number generator, for cryptographic keys.

Changes for version 0.08

  • Bugfix release. An internal variable was assigned to both Crypt::Rijndael and Crypt::RC6 (they should have received different variables). This causes negotiations to often fail when a client has RC6 and not Rijndael and the server had the opposite, or vice-versa.
  • Implemented encryption and compression module version checking. The client will fail to connect to a server if the agreed-on encryption or compression module has a version mismatch. The failure error in $@ will advise of so.

Modules

Easily create TCP/IP clients and servers