5

CVE-2001-1141

EPSS 1.37%
Veröffentlicht 10.07.2001 04:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the internal state information, which could be used by attackers to predict future pseudo-random numbers.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 13

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

OpenSSL ≫ OpenSSL Version0.9.1c

OpenSSL ≫ OpenSSL Version0.9.2b

OpenSSL ≫ OpenSSL Version0.9.3

OpenSSL ≫ OpenSSL Version0.9.4

OpenSSL ≫ OpenSSL Version0.9.5

OpenSSL ≫ OpenSSL Version0.9.6

OpenSSL ≫ OpenSSL Version0.9.6a

Ssleay ≫ Ssleay Version0.8.1

Ssleay ≫ Ssleay Version0.9

Ssleay ≫ Ssleay Version0.9.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.37%	0.796

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-013.txt.asc

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000418

http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-065.php3?dis=8.0

http://www.linuxsecurity.com/advisories/other_advisory-1483.html

http://www.osvdb.org/853

http://www.redhat.com/support/errata/RHSA-2001-051.html

Patch

Vendor Advisory

http://www.securityfocus.com/advisories/3475

http://www.securityfocus.com/archive/1/195829

Patch

Vendor Advisory

http://www.securityfocus.com/bid/3004

Patch

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/6823

https://nvd.nist.gov/vuln/detail/CVE-2001-1141

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2001-1141

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2001-1141

EUVD