PT-2008-6306 · Freebsd · Freebsd

Mark Murray + 3 · Published 2008-11-26 · Updated 2024-02-14 · CVE-2008-5162

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions 6.3 through 7.1

Description The issue is related to the arc4random function in the kernel, which lacks a proper entropy source for a short time period immediately after boot. This makes it easier for attackers to predict the function's return values, allowing them to conduct certain attacks against the GEOM framework and various network protocols. The problem is connected to the Yarrow random number generator.

Recommendations For FreeBSD versions 6.3 through 7.1, consider implementing additional entropy sources to improve the randomness of the arc4random function until a patch is available. As a temporary workaround, restrict access to sensitive network protocols and the GEOM framework immediately after boot to minimize the risk of exploitation.

Fix

Use of Insufficiently Random Values

Weakness Enumeration

CWE-330

Related Identifiers

CVE-2008-5162

Affected Products

Freebsd

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2008-5162 · Security Note
• http://security.freebsd.org/advisories/FreeBSD-SA-08:11.arc4random.asc · Vendor Advisory
• http://securitytracker.com/id?1021276 · Note
• http://osvdb.org/50137 · Note
• http://secunia.com/advisories/32871 · Note
• http://securityfocus.com/bid/32447 · Note