CVE-2001-1141

The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the internal state information, which could be used by attackers to predict future pseudo-random numbers.

• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-013.txt.asc
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000418
• http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-065.php3?dis=8.0
• http://www.linuxsecurity.com/advisories/other_advisory-1483.html
• http://www.osvdb.org/853
• http://www.redhat.com/support/errata/RHSA-2001-051.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/advisories/3475
• http://www.securityfocus.com/archive/1/195829Patch, Vendor Advisory
• http://www.securityfocus.com/bid/3004Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6823
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-013.txt.asc
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000418
• http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-065.php3?dis=8.0
• http://www.linuxsecurity.com/advisories/other_advisory-1483.html
• http://www.osvdb.org/853
• http://www.redhat.com/support/errata/RHSA-2001-051.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/advisories/3475
• http://www.securityfocus.com/archive/1/195829Patch, Vendor Advisory
• http://www.securityfocus.com/bid/3004Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6823

Published

Jul 10, 2001

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2001-1135ZyXEL Prestige 642R and 642R-I routers do not filter the rou…
• CVE-2001-1136The libsecurity library in HP-UX 11.04 (VVOS) allows attacke…
• CVE-2001-1137D-Link DI-704 Internet Gateway firmware earlier than V2.56b6…
• CVE-2001-1138Directory traversal vulnerability in r.pl (aka r.cgi) of Ran…
• CVE-2001-1139Directory traversal vulnerability in ASCII NT WinWrapper Pro…
• CVE-2001-1140BadBlue Personal Edition v1.02 beta allows remote attackers …
• CVE-2001-1142ArGoSoft FTP Server 1.2.2.2 uses weak encryption for user pa…
• CVE-2001-1143IBM DB2 7.0 allows a remote attacker to cause a denial of se…
• CVE-2001-1144Directory traversal vulnerability in McAfee ASaP VirusScan a…
• CVE-2001-1145fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2…
• CVE-2001-1146AllCommerce with debugging enabled in EnGarde Secure Linux 1…
• CVE-2001-1147The PAM implementation in /bin/login of the util-linux packa…