OpenSSL Unseeded Random Number Generator Vulnerability

Bugtraq ID:	3187
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 28 2000 12:00AM
Updated:	Feb 28 2000 12:00AM
Credit:	Fixed by Ulf Moller in OpenSSL version 0.9.5.
Vulnerable:	OpenSSL Project OpenSSL 0.9.4 + Debian Linux 3.0 + OpenBSD OpenBSD 2.6 OpenSSL Project OpenSSL 0.9.3 OpenSSL Project OpenSSL 0.9.2 b OpenSSL Project OpenSSL 0.9.1 c
Not Vulnerable:	OpenSSL Project OpenSSL 0.9.5 + Redhat Linux 6.2 sparc + Redhat Linux 6.2 i386 + Redhat Linux 6.2 alpha

OpenSSL Unseeded Random Number Generator Vulnerability

A design error exists in some versions of OpenSSL that may lead to the disclosure of sensitive information.

The problem exists because the SSL_connect() function, used to initiate the TLS/SSL handshake with a server, does not ensure that the underlying pseudo-random number generator is properly seeded before initiating a SSL connection.

This may lead in the disclosure of sensitive information by applications using the OpenSSL toolkit if the random number generator is not initialized.

This problem is known to affect qmail's unofficial 'tls.patch' patch, which fails to seed the random number generator.

OpenSSL Unseeded Random Number Generator Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

OpenSSL Unseeded Random Number Generator Vulnerability

References:

• OpenSSL Homepage (OpenSSL Project)