Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2001-1141

The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the internal state information, which could be used by attackers to predict future pseudo-random numbers.

  • Published: Jul 10, 2001
  • Updated: Apr 13, 2023
  • CVE: CVE-2001-1141
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Software From Fixed in
openssl / openssl 0.9.3 0.9.3.x
openssl / openssl 0.9.1c 0.9.1c.x
openssl / openssl 0.9.6 0.9.6.x
openssl / openssl 0.9.6a 0.9.6a.x
openssl / openssl 0.9.4 0.9.4.x
ssleay / ssleay 0.9 0.9.x
ssleay / ssleay 0.9.1 0.9.1.x
ssleay / ssleay 0.8.1 0.8.1.x
openssl / openssl 0.9.2b 0.9.2b.x
openssl / openssl 0.9.5 0.9.5.x