VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 12, 2000· Updated Jun 16, 2026

CVE-2000-0535

CVE-2000-0535

Description

OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha systems, which causes them to produce weak keys which may be more easily broken.

Affected products

4
  • OpenSSL Project/OpenSSL2 versions
    cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*
    • (no CPE)range: =0.9.4
  • FreeBSD/FreeBSD2 versions
    cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.