CVE-2007-5502 – OpenSSL Security Advisory 20071129

https://notcve.org/view.php?id=CVE-2007-5502

29 Nov 2007 — The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding during the FIPS self-test, which generates random data that is more predictable than expected and makes it easier for attackers to bypass protection mechanisms that rely on the randomness. La implementación PRNG para OpenSSL FIPS Object Module 1.1.1 no realiza una selección previa automática de la semilla durante el test de FIPS que realiza a sí mismo. Esto genera información arbitraria que es más predecible de lo... • http://secunia.com/advisories/27859 • CWE-310: Cryptographic Issues •