CVE-2000-0535

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha systems, which causes them to produce weak keys which may be more easily broken.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

No affected versions have been published.

Timeline

Published: Jun 12, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-05367.5xinetd 2.1.8.x does not properly restrict connections if hostnames are used for access control and the connecting host does not have a rever CVE-2000-05377.2BRU backup software allows local users to append data to arbitrary files by specifying an alternate configuration file with the BRUEXECLOG e CVE-2000-05385.0ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password.CVE-2000-05396.4Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession ID's via the Session CVE-2000-05405.0JSP sample files in Allaire JRun 2.3.x allow remote attackers to access arbitrary files (e.g. via viewsource.jsp) or obtain configuration in CVE-2000-05417.2The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via the CMD command.CVE-2000-05425.0Tigris remote access server before 11.5.4.22 does not properly record Radius accounting information when a user fails the initial login auth CVE-2000-05435.0The command port for PGP Certificate Server 2.5.0 and 2.5.1 allows remote attackers to cause a denial of service if their hostname does not CVE-2000-05445.0Windows NT and Windows 2000 hosts allow a remote attacker to cause a denial of service via malformed DCE/RPC SMBwriteX requests that contain CVE-2000-05454.6Buffer overflow in mailx mail command (aka Mail) on Linux systems allows local users to gain privileges via a long -c (carbon copy) paramete CVE-2000-05465.0Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the set_tgtkey CVE-2000-05475.0Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the localrealm variable in the process_v4