NVD

Id
78387  
Name
CVE-2001-0950  
Description
ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 uses insufficiently random data to (1) generate session tokens for HSMs using the C rand function, or (2) generate certificates or keys using /dev/urandom instead of another source which blocks when the entropy pool is low, which could make it easier for local or remote attackers to steal tokens or certificates via brute force guessing.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2001-12-04  
Modified Date
2016-10-17  
Seq
2001-0950  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
392074 78387 CVE-2001-0950 20011204 NMRC Advisory - Multiple Valicert Problems  View
392075 78387 CVE-2001-0950 3618  View
392076 78387 CVE-2001-0950 3620  View
392077 78387 CVE-2001-0950 http://www.valicert.com/support/security_advisory_eva.html  View
392078 78387 CVE-2001-0950 eva-insecure-key-storage(7651)  View
392079 78387 CVE-2001-0950 eva-insecure-key-generation(7653)  View

Related JVN