NVD

Id
9706  
Name
CVE-2011-3009  
Description
Ruby before 1.8.6-p114 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process, a related issue to CVE-2003-0900.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-08-05  
Modified Date
2012-11-06  
Seq
2011-3009  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
55567 9706 CVE-2011-3009 http://redmine.ruby-lang.org/issues/show/4338  View
55568 9706 CVE-2011-3009 RHSA-2012:0070  View
55569 9706 CVE-2011-3009 [oss-security] 20110720 Re: CVE Request: ruby PRNG fixes  View
55570 9706 CVE-2011-3009 RHSA-2011:1581  View
55571 9706 CVE-2011-3009 49126  View
55572 9706 CVE-2011-3009 ruby-random-number-weak-security(69157)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34604 JVNDB-2011-004846 Ruby における乱数の値を推測される脆弱性 Ruby は、fork 中の random seed をリセットしないため、乱数の値を推測される脆弱性が存在します。 CVE-2011-3009 50916 CVE-2011-3009 9706 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004846.html 2011-08-05 2012-03-27 View