![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
CVE ID: | CVE-2007-6150 |
Description: | The "internal state tracking" code for the random and urandom devices in FreeBSD 5.5, 6.1 through 6.3, and 7.0 beta 4 allows local users to obtain portions of previously-accessed random values, which could be leveraged to bypass protection mechanisms that rely on secrecy of those values. |
Test IDs: | 1.3.6.1.4.1.25623.1.0.59932 |
Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2007-6150 BugTraq ID: 26642 http://www.securityfocus.com/bid/26642 FreeBSD Security Advisory: FreeBSD-SA-07:09 http://security.FreeBSD.org/advisories/FreeBSD-SA-07:09.random.asc http://osvdb.org/39600 http://www.securitytracker.com/id?1019022 http://secunia.com/advisories/27879 http://www.vupen.com/english/advisories/2007/4053 XForce ISS Database: freebsd-sysdevrandom-information-disclosure(38764) https://exchange.xforce.ibmcloud.com/vulnerabilities/38764 |