DSA-2879-1 libssh - security update

Bulletin has no description...

Stunnel PRING初始化漏洞

Bugtraq ID:65964 CVE ID:CVE-2014-0016 Stunnel是一个自由的跨平台软件，用于提供全局的TLS / SSL 服务。 Stunnel存在安全漏洞，套接字封装程序可对普通应用程序提供SSL支持，在fork后执行PRNG初始化，当接受新连接时，服务器fork，子进程处理请求。OpenSSLRANDbytes函数在fork后没有重置其状态，而是简单的添加当前进程IDgetpid至PRNG状态，可导致使用EC ECDSA或DSA证书的服务器在某些情况下泄漏私钥。 0 Stunnel 目前没有详细解决方案提供： http://www.stunnel.org...

ProSoft Technology RadioLinx ControlScape PRNG vulnerability

Industrial automation software used worldwide to create and configure wireless radios that connect devices in environments such as oil and gas is vulnerable to attack by a hacker armed with an antenna from as far as 30 miles away. Though the vulnerability in the ProSoft Technology RadioLinx...

CVE-2008-1147

A certain pseudo-random number generator PRNG algorithm that uses XOR and 2-bit random hops aka "Algorithm X2", as used in OpenBSD 2.6 through 3.4, Mac OS X 10 through 10.5.1, FreeBSD 4.4 through 7.0, and DragonFlyBSD 1.0 through 1.10.1, allows remote attackers to guess sensitive values such as I...

CVE-2008-1146

A certain pseudo-random number generator PRNG algorithm that uses XOR and 3-bit random hops aka "Algorithm X3", as used in OpenBSD 2.8 through 4.2, allows remote attackers to guess sensitive values such as DNS transaction IDs by observing a sequence of previously generated values. NOTE: this issu...

Mandrake Linux Security Advisory : openssl (MDKSA-2001:065)

The pseudo-random number generator in OpenSSL versions up to 0.9.6a has a design flaw. By knowing the output of specific PRNG requests, an attacker would be able to determine the PRNG's internal state and thus predict future PRNG output. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...