NVD

Id
4946  
Name
CVE-2008-5162  
Description
The arc4random function in the kernel in FreeBSD 6.3 through 7.1 does not have a proper entropy source for a short time period immediately after boot, which makes it easier for attackers to predict the function"s return values and conduct certain attacks against the GEOM framework and various network protocols, related to the Yarrow random number generator.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-11-26  
Modified Date
2008-12-03  
Seq
2008-5162  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
31020 4946 CVE-2008-5162 FreeBSD-SA-08:11  View
31021 4946 CVE-2008-5162 1021276  View
31022 4946 CVE-2008-5162 32447  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47030 JVNDB-2008-002340 FreeBSD の arc4random 関数における推測可能な戻り値の脆弱性 FreeBSD の arc4random 関数には、起動直後の短時間において適切な エントロピーが不足してるため、関数の戻り値が推測される脆弱性が存在します。 CVE-2008-5162 35275 CVE-2008-5162 4946 6.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002340.html 2008-11-26 2009-07-08 View