Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2011-3009

Опубликовано: 02 июл. 2011
Источник: redhat
CVSS2: 2.1
EPSS Низкий

Описание

Ruby before 1.8.6-p114 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process, a related issue to CVE-2003-0900.

Отчет

The Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw in Red Hat Enterprise Linux 4 and 5.

Дополнительная информация

Статус:

Low
https://bugzilla.redhat.com/show_bug.cgi?id=722415ruby: Properly initialize the random number generator when forking new process

EPSS

Процентиль: 67%
0.00567
Низкий

2.1 Low

CVSS2

Связанные уязвимости

ubuntu
около 14 лет назад

Ruby before 1.8.6-p114 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process, a related issue to CVE-2003-0900.

nvd
около 14 лет назад

Ruby before 1.8.6-p114 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process, a related issue to CVE-2003-0900.

debian
около 14 лет назад

Ruby before 1.8.6-p114 does not reset the random seed upon forking, wh ...

github
больше 3 лет назад

Ruby before 1.8.6-p114 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process, a related issue to CVE-2003-0900.

oracle-oval
больше 13 лет назад

ELSA-2012-0070: ruby security update (MODERATE)

EPSS

Процентиль: 67%
0.00567
Низкий

2.1 Low

CVSS2