Debian灾难
by axis
2008-05-16
http://www.ph4nt0m.org
Debian OpenSSL包里的算法有问题，random number生成居然是在process pid里选取，导致生成key可穷举
以下摘自metasploit的blog
The Bug
On May 13th, 2008 the Debian project announced that Luciano Bello found an interesting vulnerability in the OpenSSL package they were distributing. The bug in question was caused by the removal of the following line of code from md_rand.c
阅读全文 »
