Unscored severity · published Jan 16, 2008
CVE-2008-0299
common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not properly use RandomPool, which allows one session to obtain sensitive information from…
–
CVSS
1.6%
EPSS
No
On KEV
Description
common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not properly use RandomPool, which allows one session to obtain sensitive information from another session by predicting the state of the pool.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PA
Paramiko · Python Software Foundation
1.7.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0299
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0299
bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=460706
Exploit
http://people.debian.org/~nion/nmu-diff/paramiko-1.6.4-1_1.6.4-1.1.patch
secunia.com
http://secunia.com/advisories/28488
secunia.com
http://secunia.com/advisories/28510
secunia.com
http://secunia.com/advisories/29168
security.gentoo.org
http://security.gentoo.org/glsa/glsa-200803-07.xml