CVE-2008-5162

Related Files

FreeBSD-SA-08.11.arc4random.txt

Posted Nov 25, 2008

Site security.freebsd.org

FreeBSD Security Advisory - When the arc4random random number generator is initialized, there may be inadequate entropy to meet the needs of kernel systems which rely on arc4random; and it may take up to 5 minutes before arc4random is reseeded with secure entropy from the Yarrow random number generator.

tags | advisory, kernel

systems | freebsd

advisories | CVE-2008-5162

SHA-256 | 5b358a6d007f2d56053a805066be7b6451911ecfa223bda993b2748c778af6a4

Download | Favorite | View

Mandriva Linux Security Advisory 2008-029

Posted Feb 1, 2008

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory - Ruby network libraries Net::HTTP, Net::IMAP, Net::FTPTLS, Net::Telnet, Net::POP3, and Net::SMTP, up to Ruby version 1.8.6 are affected by a possible man-in-the-middle attack, when using SSL, due to a missing check of the CN (common name) attribute in SSL certificates against the server's hostname.

tags | advisory, web, imap, ruby

systems | linux, mandriva

advisories | CVE-2008-5162, CVE-2007-5770

SHA-256 | a57d994432a4c15e61b3f7dbb9618d3eedd8de4432c74d665dfa11d1bb92f00b

Download | Favorite | View