Description

The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the internal state information, which could be used by attackers to predict future pseudo-random numbers.

Remediation

References

CVE-2001-1141

Related Vulnerabilities

WordPress Plugin NextGEN Gallery-WordPress Gallery Directory Traversal (2.0.0)

Apache 2.x version older than 2.0.51

Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2018-12023)

Oracle HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5000)

WordPress Plugin Music Store Cross-Site Scripting (1.0.52)

Severity

Medium

Classification

CVE-2001-1141

Tags

Missing Update Known Vulnerabilities