CVE-2000-0535

OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha systems, which causes them to produce weak keys which may be more easily broken.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2000-06-12

Last modified

2024-08-08

Affected products

• Freebsd (Freebsd)
• Openssl (Openssl)

References

• http://archives.neohapsis.com/archives/freebsd/2000-06/0083.html
• http://www.securityfocus.com/bid/1340