NetSight
medium5.0

CVE-2000-0535

OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha sys…

Impact

OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha systems, which causes them to produce weak keys which may be more easily broken.

Affected products

VendorProductAffected versions
OpensslOpenssl
Version 0.9.4
FreebsdFreebsd
Versions 4.0, 5.0

References