CVE-2001-0950

ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 uses insufficiently random data to (1) generate session tokens for HSMs…

published February 2, 2002

CVSS
—
EPSS
2%
Percentile
75.4
In the wild
Unconfirmed
What it is

ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 uses insufficiently random data to (1) generate session tokens for HSMs using the C rand function, or (2) generate certificates or keys using /dev/urandom instead of another source which blocks when the entropy pool is low, which could make it easier for local or remote attackers to steal tokens or certificates via brute force guessing.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01594 · 75.4th percentile
Published
2002-02-02T05:00Z
EPSS history
Timeline
  • 02 FEB 05:00Z
    ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 uses insufficiently random data to (1) generate session tokens for HSMs…
    cvelistv5