CVE-2001-1141: Medium severity OpenSSL OpenSSL vulnerability
The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the internal state information, which could be used by attackers to predict future pseudo-random numbers.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2001-1141?
CVE-2001-1141 is considered a high-severity vulnerability due to its potential to allow attackers to predict future random numbers.
How do I fix CVE-2001-1141?
To fix CVE-2001-1141, upgrade OpenSSL to version 0.9.6b or later.
What versions of software are affected by CVE-2001-1141?
CVE-2001-1141 affects OpenSSL versions prior to 0.9.6b and various versions of SSLeay.
What is the impact of exploiting CVE-2001-1141?
Exploiting CVE-2001-1141 can allow attackers to predict cryptographic keys and compromise secure communications.
Who is most at risk from CVE-2001-1141?
Organizations using vulnerable versions of OpenSSL or SSLeay for secure communications are at the highest risk from CVE-2001-1141.