NVD

Id
7798  
Name
CVE-2011-0766  
Description
The random number generator in the Crypto application before 2.0.2.2, and SSH before 2.0.5, as used in the Erlang/OTP ssh library before R14B03, uses predictable seeds based on the current time, which makes it easier for remote attackers to guess DSA host and SSH session keys.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-05-31  
Modified Date
2011-07-13  
Seq
2011-0766  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
44387 7798 CVE-2011-0766 VU#178990  View
44388 7798 CVE-2011-0766 47980  View
44389 7798 CVE-2011-0766 https://github.com/erlang/otp/commit/f228601de45c5b53241b103af6616453c50885a5  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31445 JVNDB-2011-001685 Erlang/OTP SSH ライブラリで生成される乱数が推測可能な問題 Erlang/OTP SSH ライブラリには、生成される乱数が推測可能な問題が存在します。 CVE-2011-0766 48673 CVE-2011-0766 7798 7.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001685.html 2011-05-26 2011-06-08 View