The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the internal state information, which could be used by attackers to predict future pseudo-random numbers.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.securityfocus.com/bid/3004 | vdb-entry x_refsource_BID |
| http://www.securityfocus.com/advisories/3475 | vendor-advisory x_refsource_FREEBSD |
| ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-013.txt.asc | vendor-advisory x_refsource_NETBSD |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/6823 | vdb-entry x_refsource_XF |
| http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-065.php3?dis=8.0 | vendor-advisory x_refsource_MANDRAKE |
| http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000418 | vendor-advisory x_refsource_CONECTIVA |
| http://www.securityfocus.com/archive/1/195829 | mailing-list x_refsource_BUGTRAQ |
| http://www.redhat.com/support/errata/RHSA-2001-051.html | vendor-advisory x_refsource_REDHAT |
| http://www.osvdb.org/853 | vdb-entry x_refsource_OSVDB |
| http://www.linuxsecurity.com/advisories/other_advisory-1483.html | vendor-advisory x_refsource_ENGARDE |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.securityfocus.com/bid/3004 | vdb-entry x_refsource_BID x_transferred |
| http://www.securityfocus.com/advisories/3475 | vendor-advisory x_refsource_FREEBSD x_transferred |
| ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-013.txt.asc | vendor-advisory x_refsource_NETBSD x_transferred |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/6823 | vdb-entry x_refsource_XF x_transferred |
| http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-065.php3?dis=8.0 | vendor-advisory x_refsource_MANDRAKE x_transferred |
| http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000418 | vendor-advisory x_refsource_CONECTIVA x_transferred |
| http://www.securityfocus.com/archive/1/195829 | mailing-list x_refsource_BUGTRAQ x_transferred |
| http://www.redhat.com/support/errata/RHSA-2001-051.html | vendor-advisory x_refsource_REDHAT x_transferred |
| http://www.osvdb.org/853 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.linuxsecurity.com/advisories/other_advisory-1483.html | vendor-advisory x_refsource_ENGARDE x_transferred |