CVE-2026-5087: Perl Cookie加密IV生成不安全漏洞

#!/usr/bin/perl # PoC for CVE-2026-5087: Demonstrates insecure fallback to rand() # This script simulates the vulnerable behavior when /dev/urandom is unavailable. use strict; use warnings; sub generate_vulnerable_iv { my $length = 16; my $iv = ''; # Attempt to read from /dev/urandom if (open(my $fh, '<:raw', '/dev/urandom')) { read($fh, $iv, $length); close($fh); return $iv; } else { # VULNERABLE FALLBACK: Using built-in rand() which is not cryptographically secure warn "[!] /dev/urandom not found. Falling back to insecure rand()."; for (1..$length) { $iv .= chr(int(rand(256))); } return $iv; } } print "Simulating IV generation on a system without /dev/urandom (e.g., Windows)... "; my $iv1 = generate_vulnerable_iv(); my $iv2 = generate_vulnerable_iv(); print "IV 1: " . unpack("H*", $iv1) . "\n"; print "IV 2: " . unpack("H*", $iv2) . "\n"; print "[*] If run on Windows, these IVs are predictable and compromise session encryption.\n";