CVE-2011-3009 in Ruby
Summary
Ruby before 1.8.6-p114 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process, a related issue to CVE-2003-0900.
Reservation
08/05/2011
Disclosure
08/05/2011
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 58201 | Ruby cryptographic issue | 310 | Not defined | Official fix | CVE-2011-3009 |