CVE-2000-0535: Medium severity OpenSSL OpenSSL vulnerability
OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha systems, which causes them to produce weak keys which may be more easily broken.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0535?
CVE-2000-0535 has a moderate severity due to its potential to produce weak cryptographic keys.
How does CVE-2000-0535 affect OpenSSL 0.9.4?
CVE-2000-0535 affects OpenSSL 0.9.4 by not properly checking for the existence of /dev/random or /dev/urandom, leading to weak key generation.
What systems are affected by CVE-2000-0535?
CVE-2000-0535 specifically affects FreeBSD Alpha systems as they lack the /dev/random and /dev/urandom devices.
How do I fix CVE-2000-0535?
To fix CVE-2000-0535, you should upgrade to a version of OpenSSL that properly addresses the key generation issue.
What are the consequences of exploiting CVE-2000-0535?
Exploiting CVE-2000-0535 could result in weakened cryptographic security, making it easier for attackers to break keys.