Secunia Logo
 
CVE Reference: CVE-2008-0299
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2008-0299

Description:
common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not properly use RandomPool, which allows one session to obtain sensitive information from another session by predicting the state of the pool.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/39749

SAID
  Secunia Advisory: SA28488
  Secunia Advisory: SA28510
  Secunia Advisory: SA29168

MISC
  http://www.lag.net/pipermail/paramiko/2008-January/000599.html
  http://people.debian.org/~nion/nmu-diff/paramiko-1.6.4-1_1.6.4-1.1.patch

GENTOO
  http://security.gentoo.org/glsa/glsa-200803-07.xml

FEDORA

CONFIRM
  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=460706

BID
  27307


Return to the previous page.