CVEvulnerability

CVE-2001-1141

5.0 MEDIUM Published 2001-07-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-07-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the internal state information, which could be used by attackers to predict future pseudo-random numbers.

Affected configurations

• openssl openssl 0.9.1c • openssl openssl 0.9.2b • openssl openssl 0.9.3 • openssl openssl 0.9.4 • openssl openssl 0.9.5 • openssl openssl 0.9.6 • openssl openssl 0.9.6a • ssleay ssleay 0.8.1 • ssleay ssleay 0.9 • ssleay ssleay 0.9.1

Related

Referenced by CWE · observed example (2)

  • CWE-340 Generation of Predictable Numbers or Identifiers weakness
  • CWE-341 Predictable from Observable State weakness

References