PT-2001-2283 · Openssl · Openssl

Publicado 2001-07-10 · Atualizado 2017-10-10 · CVE-2001-1141

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 0.9.6b

Description The issue concerns the Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL, which allows attackers to determine the internal state information by using the output of small PRNG requests. This could potentially be used by attackers to predict future pseudo-random numbers.

Recommendations For versions prior to 0.9.6b, update to version 0.9.6b or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2001-1141

Produtos afetados

Openssl

Referências · 12

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000418 · Aviso do Fabricante
• http://linuxsecurity.com/advisories/other_advisory-1483.html · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2001-051.html · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1141 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6823 · Nota
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-013.txt.asc · Aviso do Fabricante
• http://linux-mandrake.com/en/security/2001/MDKSA-2001-065.php3?dis=8.0 · Aviso do Fabricante
• http://securityfocus.com/advisories/3475 · Aviso do Fabricante
• http://securityfocus.com/archive/1/195829 · Aviso do Fabricante
• http://securityfocus.com/bid/3004 · Aviso do Fabricante
• http://osvdb.org/853 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-1141 · Nota de Segurança