CVE-2001-1141

2001-07-1004:00:00

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.005

Percentile

75.6%

JSON

The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the internal state information, which could be used by attackers to predict future pseudo-random numbers.

Affected configurations

Nvd

Node

opensslopensslMatch0.9.1c

opensslopensslMatch0.9.2b

opensslopensslMatch0.9.3

opensslopensslMatch0.9.4

opensslopensslMatch0.9.5

opensslopensslMatch0.9.6

opensslopensslMatch0.9.6a

ssleayssleayMatch0.8.1

ssleayssleayMatch0.9

ssleayssleayMatch0.9.1

VendorProductVersionCPE
opensslopenssl0.9.1ccpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*
opensslopenssl0.9.2bcpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*
opensslopenssl0.9.3cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*
opensslopenssl0.9.4cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*
opensslopenssl0.9.5cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*
opensslopenssl0.9.6cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*
opensslopenssl0.9.6acpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*
ssleayssleay0.8.1cpe:2.3:a:ssleay:ssleay:0.8.1:*:*:*:*:*:*:*
ssleayssleay0.9cpe:2.3:a:ssleay:ssleay:0.9:*:*:*:*:*:*:*
ssleayssleay0.9.1cpe:2.3:a:ssleay:ssleay:0.9.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
openssl	openssl	0.9.1c	cpe:2.3:a:openssl:openssl:0.9.1c:::::::*
openssl	openssl	0.9.2b	cpe:2.3:a:openssl:openssl:0.9.2b:::::::*
openssl	openssl	0.9.3	cpe:2.3:a:openssl:openssl:0.9.3:::::::*
openssl	openssl	0.9.4	cpe:2.3:a:openssl:openssl:0.9.4:::::::*
openssl	openssl	0.9.5	cpe:2.3:a:openssl:openssl:0.9.5:::::::*
openssl	openssl	0.9.6	cpe:2.3:a:openssl:openssl:0.9.6:::::::*
openssl	openssl	0.9.6a	cpe:2.3:a:openssl:openssl:0.9.6a:::::::*
ssleay	ssleay	0.8.1	cpe:2.3:a:ssleay:ssleay:0.8.1:::::::*
ssleay	ssleay	0.9	cpe:2.3:a:ssleay:ssleay:0.9:::::::*
ssleay	ssleay	0.9.1	cpe:2.3:a:ssleay:ssleay:0.9.1:::::::*