NetSight
IP …
high7.5Public exploit code

CVE-2008-0166

OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable numbers, which make…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable numbers, which makes it easier for remote attackers to conduct brute force guessing attacks against cryptographic keys.

Affected products

VendorProductAffected versions
OpensslOpenssl
from 0.9.8c-1 through 0.9.8g
CanonicalUbuntu Linux
Versions 6.06, 7.04, 7.10, 8.04
DebianDebian Linux
Version 4.0

Weakness classification

CWE-338

References