CVE-2001-1141

Description

The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the internal state information, which could be used by attackers to predict future pseudo-random numbers.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/6823

http://www.securityfocus.com/bid/3004

http://www.securityfocus.com/archive/1/195829

http://www.securityfocus.com/advisories/3475

http://www.redhat.com/support/errata/RHSA-2001-051.html

http://www.osvdb.org/853

http://www.linuxsecurity.com/advisories/other_advisory-1483.html

http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-065.php3?dis=8.0

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000418

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3