CVE-2008-0299
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2008-0299
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2008-0299.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2008-0299
- Aliases
- Published
- 2008-01-16T23:00:00Z
- Modified
- 2024-11-21T00:41:37Z
- Summary
- [none]
- Details
-
common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not properly use RandomPool, which allows one session to obtain sensitive information from another session by predicting the state of the pool.
- References
-
- http://secunia.com/advisories/28488
- http://secunia.com/advisories/28510
- http://secunia.com/advisories/29168
- http://security.gentoo.org/glsa/glsa-200803-07.xml
- http://people.debian.org/~nion/nmu-diff/paramiko-1.6.4-1_1.6.4-1.1.patch
- https://bugzilla.redhat.com/show_bug.cgi?id=428727
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=460706
- http://www.lag.net/pipermail/paramiko/2008-January/000599.html
- http://www.securityfocus.com/bid/27307
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39749
- https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00529.html
- https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00594.html
- https://security-tracker.debian.org/tracker/CVE-2008-0299
Affected packages
Debian:11 / paramiko
Package
- Name
- paramiko
- Purl
- pkg:deb/debian/paramiko?arch=source
Debian:12 / paramiko
Package
- Name
- paramiko
- Purl
- pkg:deb/debian/paramiko?arch=source
Debian:13 / paramiko
Package
- Name
- paramiko
- Purl
- pkg:deb/debian/paramiko?arch=source