Home > Vulnerability Database > CVE-2008-0299

Mend.io Vulnerability Database

CVE-2008-0299

Date: January 16, 2008

common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not properly use RandomPool, which allows one session to obtain sensitive information from another session by predicting the state of the pool.

Severity Score

6.5

Related Resources (21)

Url: http://www.securityfocus.com/bid/27307

Url: https://web.archive.org/web/20080205095439/http://secunia.com/advisories/28488

Url: https://nvd.nist.gov/vuln/detail/CVE-2008-0299

Url: https://web.archive.org/web/20081012023428/http://www.securityfocus.com/bid/27307

Url: https://github.com/pypa/advisory-database/tree/main/vulns/paramiko/PYSEC-2008-8.yaml

Url: http://security.gentoo.org/glsa/glsa-200803-07.xml

Url: https://web.archive.org/web/20080628232710/http://secunia.com/advisories/29168

Url: https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00529.html

Url: https://github.com/paramiko/paramiko

Url: http://www.lag.net/pipermail/paramiko/2008-January/000599.html

Url: https://web.archive.org/web/20080720033315/http://www.lag.net/pipermail/paramiko/2008-January/000599.html

Url: https://web.archive.org/web/20080627172450/http://secunia.com/advisories/28510

Url: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=460706

Url: https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00594.html

Url: http://people.debian.org/~nion/nmu-diff/paramiko-1.6.4-1_1.6.4-1.1.patch

Url: http://secunia.com/advisories/29168

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/39749

Url: https://bugzilla.redhat.com/show_bug.cgi?id=428727

Url: http://secunia.com/advisories/28488

Url: http://secunia.com/advisories/28510

Url: https://www.mend.io/vulnerability-database/CVE-2008-0299

Severity Score

6.5

Weakness Type (CWE)

Exposure of Sensitive Information to an Unauthorized Actor

CWE-200

CVSS v3.1

Base Score:	6.5
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	NONE
Availability (A):	NONE

CVSS v2

Base Score:	4.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2008-0299

Date: January 16, 2008

Severity Score

Related Resources (21)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?