Vulnerability in Freebsd

CVE-2000-0535

OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha systems, which causes them to produce weak keys which may be more easily broken.

EPSS: 0.014 (70.4th percentile) — read the EPSS interpretation.

Affected products

  • Freebsd — versions 4.0, 5.0
  • Openssl — versions 0.9.4
  • N/a — versions n/a

Public proof-of-concept exploits

References

  • cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
  • cve@mitre.org (x_refsource_FREEBSD, vendor-advisory, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2000-0535?
CVE-2000-0535 is a vulnerability in Freebsd. Published 2000-06-12.
Is CVE-2000-0535 known to be exploited?
2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.