PT-2011-2617 · Ericsson · Erlang/Otp

Geoff Cant · Publicado 2011-05-31 · Atualizado 2023-09-25 · CVE-2011-0766

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Crypto application versions prior to 2.0.2.2 SSH versions prior to 2.0.5 Erlang/OTP ssh library versions prior to R14B03

Description The random number generator uses predictable seeds based on the current time, making it easier for remote attackers to guess DSA host and SSH session keys.

Recommendations For Crypto application versions prior to 2.0.2.2, update to version 2.0.2.2 or later. For SSH versions prior to 2.0.5, update to version 2.0.5 or later. For Erlang/OTP ssh library versions prior to R14B03, update to version R14B03 or later.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2011-0766

Produtos afetados

Erlang/Otp

Referências · 9

• https://github.com/erlang/otp/commit/f228601de45c5b53241b103af6616453c50885a5 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2011-0766 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-0766 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2011-0766 · Aviso do Fabricante
• http://secunia.com/advisories/44709 · Aviso do Fabricante
• https://t.me/cvenotify/58553 · Publicação no Telegram
• http://kb.cert.org/vuls/id/178990 · Correção
• http://securityfocus.com/bid/47980 · Nota
• https://osv.dev/vulnerability/CVE-2011-0766 · Aviso do Fabricante