Lucene search

K
nvd[email protected]NVD:CVE-2007-6150
HistoryNov 30, 2007 - 1:46 a.m.

CVE-2007-6150

2007-11-3001:46:00
CWE-200
web.nvd.nist.gov
4

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0

Percentile

5.1%

The โ€œinternal state trackingโ€ code for the random and urandom devices in FreeBSD 5.5, 6.1 through 6.3, and 7.0 beta 4 allows local users to obtain portions of previously-accessed random values, which could be leveraged to bypass protection mechanisms that rely on secrecy of those values.

Affected configurations

Nvd
Node
freebsdfreebsdMatch5.5
OR
freebsdfreebsdMatch6.1
OR
freebsdfreebsdMatch6.2
OR
freebsdfreebsdMatch6.3
OR
freebsdfreebsdMatch7.0beta_4

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0

Percentile

5.1%