5

CVE-2001-1141

The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the internal state information, which could be used by attackers to predict future pseudo-random numbers.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
OpenSSL ≫ OpenSSL Version0.9.1c
OpenSSL ≫ OpenSSL Version0.9.2b
OpenSSL ≫ OpenSSL Version0.9.3
OpenSSL ≫ OpenSSL Version0.9.4
OpenSSL ≫ OpenSSL Version0.9.5
OpenSSL ≫ OpenSSL Version0.9.6
OpenSSL ≫ OpenSSL Version0.9.6a
Ssleay ≫ Ssleay Version0.8.1
Ssleay ≫ Ssleay Version0.9
Ssleay ≫ Ssleay Version0.9.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.99% 0.911
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-013.txt.asc
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000418
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-065.php3?dis=8.0
http://www.linuxsecurity.com/advisories/other_advisory-1483.html
http://www.osvdb.org/853
http://www.redhat.com/support/errata/RHSA-2001-051.html
Patch
Vendor Advisory
http://www.securityfocus.com/advisories/3475
http://www.securityfocus.com/archive/1/195829
Patch
Vendor Advisory
http://www.securityfocus.com/bid/3004
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6823