7.8

CVE-2011-0766

The random number generator in the Crypto application before 2.0.2.2, and SSH before 2.0.5, as used in the Erlang/OTP ssh library before R14B03, uses predictable seeds based on the current time, which makes it easier for remote attackers to guess DSA host and SSH session keys.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Erlang ≫ Crypto Version <= 2.0.2.1
Ssh ≫ Ssh Version <= 2.0.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.05% 0.858
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:C/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/44709
Vendor Advisory
http://www.kb.cert.org/vuls/id/178990
Patch
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/47980
Third Party Advisory
VDB Entry
https://github.com/erlang/otp/commit/f228601de45c5b53241b103af6616453c50885a5
Patch