Description

The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the internal state information, which could be used by attackers to predict future pseudo-random numbers.

Remediation

References

CVE-2001-1141

Related Vulnerabilities

Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1098)

WordPress Plugin Quick Featured Images Cross-Site Scripting (12.3.5)

WordPress Plugin Advanced Custom Fields (ACF) Multiple Security Bypass Vulnerabilities (5.10.2)

WordPress Plugin JoomSport-for Sports: Team & League, Football, Hockey & more PHP Object Injection (5.1.5)

IBM WebSEAL CVE-2019-4145 Vulnerability (CVE-2019-4145)

Severity

Medium

Classification

CVE-2001-1141

Tags

Missing Update Known Vulnerabilities