paramiko Random Number Generator Weakness
BID:27307
Info
paramiko Random Number Generator Weakness
| Bugtraq ID: | 27307 |
| Class: | Design Error |
| CVE: |
CVE-2008-0299 |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jan 13 2008 12:00AM |
| Updated: | May 07 2015 05:33PM |
| Credit: | Dwayne C. Litzenberger is credited with the discovery of this issue. |
| Vulnerable: |
paramiko paramiko 1.7.1 Gentoo Linux |
| Not Vulnerable: | |
Discussion
paramiko Random Number Generator Weakness
The 'paramiko' module is prone to a random-number-generator weakness; fixes are available.
Remote attackers can exploit this issue to predict random data generated by certain applications that use paramiko for encryption purposes.
Attackers may gain access to sensitive information that may aid in further attacks.
The 'paramiko' module is prone to a random-number-generator weakness; fixes are available.
Remote attackers can exploit this issue to predict random data generated by certain applications that use paramiko for encryption purposes.
Attackers may gain access to sensitive information that may aid in further attacks.
Exploit / POC
paramiko Random Number Generator Weakness
Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
paramiko Random Number Generator Weakness
Solution:
The vendor has released updates to address this issue. Please see the references for more information.
Solution:
The vendor has released updates to address this issue. Please see the references for more information.
References
paramiko Random Number Generator Weakness
References:
References:
- #460706: python-paramiko: insecure use of RandomPool (Debian)
- [paramiko] [MERGE] insecure use of RandomPool (Dwayne C. Litzenberger)
- paramiko Homepage (paramiko)