CVE

Id
31500  
CVE No.
CVE-2008-1383  
Status
Candidate  
Description
The docert function in ssl-cert.eclass, when used by src_compile or src_install on Gentoo Linux, stores the SSL key in a binpkg, which allows local users to extract the key from the binpkg, and causes multiple systems that use this binpkg to have the same SSL key and certificate.  
Phase
Assigned (20080318)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
337927 31500 CVE-2008-1383 CONFIRM:https://bugs.gentoo.org/show_bug.cgi?id=174759  View
337928 31500 CVE-2008-1383 GENTOO:GLSA-200803-30  View
337929 31500 CVE-2008-1383 URL:http://security.gentoo.org/glsa/glsa-200803-30.xml  View
337930 31500 CVE-2008-1383 BID:28350  View
337931 31500 CVE-2008-1383 URL:http://www.securityfocus.com/bid/28350  View
337932 31500 CVE-2008-1383 OSVDB:43479  View
337933 31500 CVE-2008-1383 URL:http://osvdb.org/43479  View
337934 31500 CVE-2008-1383 SECUNIA:29436  View
337935 31500 CVE-2008-1383 URL:http://secunia.com/advisories/29436  View
337936 31500 CVE-2008-1383 XF:gentoo-docert-sslkey-weak-security(41336)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46399 JVNDB-2008-001709 ClamAV の ARJ アーカイブの処理におけるサービス運用妨害 (DoS) の脆弱性 ClamAV には、ARJ アーカイブの処理に不備があるため、サービス運用妨害 (DoS) の脆弱性が存在します。 CVE-2008-1387 31500 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001709.html  View