CVE

Id
3756  
CVE No.
CVE-2001-0950  
Status
Candidate  
Description
ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 uses insufficiently random data to (1) generate session tokens for HSMs using the C rand function, or (2) generate certificates or keys using /dev/urandom instead of another source which blocks when the entropy pool is low, which could make it easier for local or remote attackers to steal tokens or certificates via brute force guessing.  
Phase
Proposed (20020131)  
Votes
ACCEPT(4) Baker, Cole, Frech, Green | NOOP(2) Foat, Wall  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
17004 3756 CVE-2001-0950 BUGTRAQ:20011204 NMRC Advisory - Multiple Valicert Problems  View
17005 3756 CVE-2001-0950 URL:http://marc.info/?l=bugtraq&m=100749428517090&w=2  View
17006 3756 CVE-2001-0950 CONFIRM:http://www.valicert.com/support/security_advisory_eva.html  View
17007 3756 CVE-2001-0950 XF:eva-insecure-key-generation(7653)  View
17008 3756 CVE-2001-0950 URL:http://xforce.iss.net/static/7653.php  View
17009 3756 CVE-2001-0950 XF:eva-insecure-key-storage(7651)  View
17010 3756 CVE-2001-0950 URL:http://xforce.iss.net/static/7651.php  View
17011 3756 CVE-2001-0950 BID:3618  View
17012 3756 CVE-2001-0950 URL:http://www.securityfocus.com/bid/3618  View
17013 3756 CVE-2001-0950 BID:3620  View

Related JVN