NVD

Id
57567  
Name
CVE-2007-5502  
Description
The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding during the FIPS self-test, which generates random data that is more predictable than expected and makes it easier for attackers to bypass protection mechanisms that rely on the randomness.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-12-01  
Modified Date
2011-03-07  
Seq
2007-5502  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
294569 57567 CVE-2007-5502 VU#150249  View
294570 57567 CVE-2007-5502 http://www.openssl.org/news/secadv_20071129.txt  View
294571 57567 CVE-2007-5502 26652  View
294572 57567 CVE-2007-5502 1019029  View
294573 57567 CVE-2007-5502 ADV-2007-4044  View
294574 57567 CVE-2007-5502 openssl-fips-prng-security-bypass(38796)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55841 JVNDB-2007-004533 OpenSSL FIPS Object Module の PRNG 実装におけるランダム性に依存する保護メカニズムを回避される脆弱性 OpenSSL FIPS Object Module の PRNG 実装は、FIPS 自己テスト中に自動シード処理をしないため、想定よりも予測可能なランダムデータが生成されることにより、これに依存する保護メカニズムを回避される脆弱性が存在します。 CVE-2007-5502 28857 CVE-2007-5502 57567 6.4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004533.html 2007-11-29 2012-09-25 View