PT-2008-6306 · Freebsd · Freebsd

Mark Murray + 3 · Publicado 2008-11-26 · Atualizado 2024-02-14 · CVE-2008-5162

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions 6.3 through 7.1

Description The issue is related to the arc4random function in the kernel, which lacks a proper entropy source for a short time period immediately after boot. This makes it easier for attackers to predict the function's return values, allowing them to conduct certain attacks against the GEOM framework and various network protocols. The problem is connected to the Yarrow random number generator.

Recommendations For FreeBSD versions 6.3 through 7.1, consider implementing additional entropy sources to improve the randomness of the arc4random function until a patch is available. As a temporary workaround, restrict access to sensitive network protocols and the GEOM framework immediately after boot to minimize the risk of exploitation.

Correção

Use of Insufficiently Random Values

Enumeração de Fraquezas

CWE-330

Identificadores relacionados

CVE-2008-5162

Produtos afetados

Freebsd

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2008-5162 · Nota de Segurança
• http://securitytracker.com/id?1021276 · Nota
• http://osvdb.org/50137 · Nota
• http://secunia.com/advisories/32871 · Nota
• http://securityfocus.com/bid/32447 · Nota
• http://security.freebsd.org/advisories/FreeBSD-SA-08:11.arc4random.asc · Aviso do Fabricante