Net::BitTorrent versions through 2.0.1 for Perl generate the MSE Diffie-Hellman private key using Perl's rand(), a non-cryptographic drand48-class PRNG seeded once per process. The handshake sends cleartext random padding derived from the same PRNG sequence, enabling a passive observer to recover the PRNG state, reconstruct the private key, compute the shared secret from the peer's public key, derive the RC4 keys, and decrypt the connection. This vulnerability arises from the use of a cryptographically weak PRNG (CWE-338) and results in the compromise of the MSE handshake confidentiality.

An attacker who passively observes the MSE handshake can recover the PRNG state and reconstruct the Diffie-Hellman private key, allowing them to compute the shared secret and derive the RC4 encryption keys. This enables decryption of the encrypted connection, defeating the confidentiality protections of the MSE handshake.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch is currently documented. Users should monitor for vendor updates addressing the use of a cryptographically secure PRNG for key generation in Net::BitTorrent.