Lucene search
MitreCVE-2000-0535HistoryJul 12, 2000 - 4:00 a.m.
CVE-2000-0535
2000-07-1204:00:00
mitre
web.nvd.nist.gov
32
cve-2000-0535
openssl 0.9.4
openssh
freebsd alpha
/dev/random
weak keys
nvd
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.5
Confidence
High
EPSS
0.003
Percentile
71.5%
OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha systems, which causes them to produce weak keys which may be more easily broken.
Affected configurations
Node
opensslopensslMatch0.9.4
Node
freebsdfreebsdMatch4.0alpha
ORfreebsdfreebsdMatch5.0alpha
Related
openvas
openvas
OpenSSL <= 0.9.4 Weak Key Vulnerability
2020-11-09 00:00:00
nvd
nvd
CVE-2000-0535
2000-06-12 04:00:00
nessus
nessus
OpenSSH < 2.1.0 /dev/random Check Failure
2011-11-18 00:00:00
OpenSSL < 0.9.5a /dev/random Check Failure
2011-11-18 00:00:00
OpenSSL < 0.9.6e / 0.9.7b3 Multiple Remote Vulnerabilities
2002-08-05 00:00:00
cvelist
cvelist
CVE-2000-0535
2000-07-12 04:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.5
Confidence
High
EPSS
0.003
Percentile
71.5%
Related for CVE-2000-0535