CVE-2008-0166

OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable numbers, which makes it easier for remote attackers to conduct brute force guessing attacks against cryptographic keys.

• CWE-338

• http://metasploit.com/users/hdm/tools/debian-openssl/Broken Link
• http://secunia.com/advisories/30136Broken Link, Vendor Advisory
• http://secunia.com/advisories/30220Broken Link, Vendor Advisory
• http://secunia.com/advisories/30221Broken Link, Vendor Advisory
• http://secunia.com/advisories/30231Broken Link, Vendor Advisory
• http://secunia.com/advisories/30239Broken Link, Vendor Advisory
• http://secunia.com/advisories/30249Broken Link, Vendor Advisory
• http://sourceforge.net/mailarchive/forum.php?thread_name=48367252.7070603%40shemesh.biz&forum_name=rsyncrypto-develThird Party Advisory
• http://www.debian.org/security/2008/dsa-1571Mailing List, Patch, Vendor Advisory
• http://www.debian.org/security/2008/dsa-1576Mailing List, Patch
• http://www.kb.cert.org/vuls/id/925211Third Party Advisory, US Government Resource
• http://www.securityfocus.com/archive/1/492112/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/29179Broken Link, Exploit, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1020017Broken Link, Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/usn-612-1Patch, Third Party Advisory
• http://www.ubuntu.com/usn/usn-612-2Patch, Third Party Advisory
• http://www.ubuntu.com/usn/usn-612-3Third Party Advisory
• http://www.ubuntu.com/usn/usn-612-4Third Party Advisory
• http://www.ubuntu.com/usn/usn-612-7Third Party Advisory
• http://www.us-cert.gov/cas/techalerts/TA08-137A.htmlBroken Link, Third Party Advisory, US Government Resource
• https://16years.secvuln.info
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42375Third Party Advisory, VDB Entry
• https://news.ycombinator.com/item?id=40333169
• https://www.exploit-db.com/exploits/5622Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/5632Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/5720Exploit, Third Party Advisory, VDB Entry
• http://metasploit.com/users/hdm/tools/debian-openssl/Broken Link
• http://secunia.com/advisories/30136Broken Link, Vendor Advisory
• http://secunia.com/advisories/30220Broken Link, Vendor Advisory
• http://secunia.com/advisories/30221Broken Link, Vendor Advisory
• http://secunia.com/advisories/30231Broken Link, Vendor Advisory
• http://secunia.com/advisories/30239Broken Link, Vendor Advisory
• http://secunia.com/advisories/30249Broken Link, Vendor Advisory
• http://sourceforge.net/mailarchive/forum.php?thread_name=48367252.7070603%40shemesh.biz&forum_name=rsyncrypto-develThird Party Advisory
• http://www.debian.org/security/2008/dsa-1571Mailing List, Patch, Vendor Advisory
• http://www.debian.org/security/2008/dsa-1576Mailing List, Patch
• http://www.kb.cert.org/vuls/id/925211Third Party Advisory, US Government Resource
• http://www.securityfocus.com/archive/1/492112/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/29179Broken Link, Exploit, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1020017Broken Link, Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/usn-612-1Patch, Third Party Advisory
• http://www.ubuntu.com/usn/usn-612-2Patch, Third Party Advisory
• http://www.ubuntu.com/usn/usn-612-3Third Party Advisory
• http://www.ubuntu.com/usn/usn-612-4Third Party Advisory
• http://www.ubuntu.com/usn/usn-612-7Third Party Advisory
• http://www.us-cert.gov/cas/techalerts/TA08-137A.htmlBroken Link, Third Party Advisory, US Government Resource
• https://16years.secvuln.info
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42375Third Party Advisory, VDB Entry
• https://news.ycombinator.com/item?id=40333169
• https://www.exploit-db.com/exploits/5622Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/5632Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/5720Exploit, Third Party Advisory, VDB Entry

Published

May 13, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-0158Directory traversal vulnerability in index.php in Shop-Scrip…
• CVE-2008-0159SQL injection vulnerability in index.php in eggBlog 3.1.0 an…
• CVE-2008-0162misc.c in splitvt 1.6.6 and earlier does not drop group priv…
• CVE-2008-0163Linux kernel 2.6, when using vservers, allows local users to…
• CVE-2008-0164Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2008-0165Cross-site request forgery (CSRF) vulnerability in Ikiwiki b…
• CVE-2008-0167The write_array_file function in utils/include.pl in GForge …
• CVE-2008-0169Plugin/passwordauth.pm (aka the passwordauth plugin) in ikiw…
• CVE-2008-0171regex/v4/perl_matcher_non_recursive.hpp in the Boost regex l…
• CVE-2008-0172The get_repeat_type function in basic_regex_creator.hpp in t…
• CVE-2008-0173SQL injection vulnerability in Gforge 4.6.99 and earlier all…
• CVE-2008-0174GE Fanuc Proficy Real-Time Information Portal 2.6 and earlie…9.8