Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2011-2686

Опубликовано: 05 авг. 2011
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

Ruby before 1.8.7-p352 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process, a related issue to CVE-2003-0900. NOTE: this issue exists because of a regression during Ruby 1.8.6 development.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*
Версия до 1.8.7-334 (включая)
cpe:2.3:a:ruby-lang:ruby:1.8.7:p22:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:1.8.7:p71:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:1.8.7:p72:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:1.8.7-160:*:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:1.8.7-173:*:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:1.8.7-248:*:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:1.8.7-249:*:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:1.8.7-299:*:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:1.8.7-302:*:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:1.8.7-330:*:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:1.8.7-p21:*:*:*:*:*:*:*

EPSS

Процентиль: 71%
0.00669
Низкий

5 Medium

CVSS2

Дефекты

CWE-310

Связанные уязвимости

ubuntu
больше 14 лет назад

Ruby before 1.8.7-p352 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process, a related issue to CVE-2003-0900. NOTE: this issue exists because of a regression during Ruby 1.8.6 development.

redhat
больше 14 лет назад

Ruby before 1.8.7-p352 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process, a related issue to CVE-2003-0900. NOTE: this issue exists because of a regression during Ruby 1.8.6 development.

debian
больше 14 лет назад

Ruby before 1.8.7-p352 does not reset the random seed upon forking, wh ...

github
больше 3 лет назад

Ruby before 1.8.7-p352 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process, a related issue to CVE-2003-0900. NOTE: this issue exists because of a regression during Ruby 1.8.6 development.

EPSS

Процентиль: 71%
0.00669
Низкий

5 Medium

CVSS2

Дефекты

CWE-310