Published: 13/05/2008 Updated: 09/02/2024

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 802

Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N

OpenSSL 0.9.8c-1 up to versions prior to 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable numbers, which makes it easier for remote malicious users to conduct brute force guessing attacks against cryptographic keys.

Vulnerable Product	Search on Vulmon	Subscribe to Product
openssl openssl
canonical ubuntu linux 7.04
canonical ubuntu linux 7.10
canonical ubuntu linux 8.04
canonical ubuntu linux 6.06
debian debian linux 4.0

Luciano Bello discovered that the random number generator in Debian's openssl package is predictable This is caused by an incorrect Debian-specific change to the openssl package (CVE-2008-0166) As a result, cryptographic key material may be guessable This is a Debian-specific vulnerability which does not affect other operating systems which are ...

The recently announced vulnerability in Debian's openssl package (DSA-1571-1, CVE-2008-0166) indirectly affects OpenSSH As a result, all user and host keys generated using broken versions of the openssl package must be considered untrustworthy, even after the openssl update has been applied 1 Install the security updates This update contains ...

USN-612-2 introduced protections for OpenSSH, related to the OpenSSL vulnerabilities addressed by USN-612-1 This update provides the corresponding updates for OpenSSH in Ubuntu 606 LTS While the OpenSSL in Ubuntu 606 is not vulnerable, this update will block weak keys generated on systems that may have been affected themselves ...

USN-612-1 fixed vulnerabilities in openssl This update provides the corresponding updates for ssl-cert – potentially compromised snake-oil SSL certificates will be regenerated ...

A weakness has been discovered in the random number generator used by OpenSSL on Debian and Ubuntu systems As a result of this weakness, certain encryption keys are much more common than they should be, such that an attacker could guess the key through a brute-force attack given minimal knowledge of the system This particularly affects the use ...

#!/bin/python # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2 of the License, or # (at your option) any later version # # This program is distributed in the hope that it will b ...

#!/usr/bin/ruby # # Debian SSH Key Tester # L4teral <l4teral [at] gmail com> # # This tool helps to find user accounts with weak SSH keys # that should be regenerated with an unaffected version # of openssl # # You will need the precalculated keys provided by HD Moore # See metasploitcom/users/hdm/tools/debian-openssl/ # for further ...

the debian openssl issue leads that there are only 65536 possible ssh keys generated, cause the only entropy is the pid of the process generating the key This leads to that the following perl script can be used with the precalculated ssh keys to brute force the ssh login It works if such a keys is installed on a non-patched debian or any ot ...

Spotting and sharing weak cryptographic key materials

snake-oil-crypto Snake-oil crypto is a term coined by Phil Zimmermann in 1991 original PGP user guide that designates bad security products that are hardly distinguishable from good ones: like [] automotive seat belts that look good and feel good, but snap open in the slowest crash test The main aim of this project is therefore to provide slow speed crash tests for crypto

thc-btc-rng-bruteforce A tool to determine if anyone ever used the Bitcoin client software to receive a Bitcoin payment on a system that uses the CVE-2008-0166 broken Random Number Generator (The tool generates all possible combinations of bitcoin addresses using the broken RNG) Answer: We did not find any Though, it was a lot of fun searching The broken version of OpenSS

Private keys vulnerable to Debian OpenSSL bug (CVE-2008-0166)

debianopenssl Private keys vulnerable to Debian OpenSSL bug (CVE-2008-0166) In 2008 a bug in Debian's and Ubuntu's OpenSSL package led to predictable private keys While the number of keys is limited, it takes a few considerations to create a proper list of all plausibly affected keys This repository contains the keys used for the blocklist in the badkeys tool Notes

Debian weak key generator

key_generator Debian weak key generator Introduction CABForum Baseline Requirements 4911 (Reasons for Revoking a Subscriber Certificate) and 6113 (Subscriber Key Pair Generation) expect Certification Authorities (CAs) to check that there is not a proven method that can easily compute the Subscriber's Private Key based on the Public Key, citing the example of Debian

Debian OpenSSL Predictable PRNG Exploitation. This is an integrated repo included the exploitation, usage example, data package and explanation, more.

Debian OpenSSL Predictable PRNG Exploitation This is an integrated repository included the exploitation, usage example, data package and explanation, more Exploitations OpenSSL 098c-1 < 098g-9 (Debian and Derivatives) - Predictable PRNG Brute Force SSH wwwexploit-dbcom/exploits/5622/ (Perl) wwwexploit-dbcom/exploits/5720/ (Python) wwwe

Debian OpenSSL Predictable PRNG Exploitation. This is an integrated repo included the exploitation, usage example, data package and explanation, more.

CryptoDeepTools Crypto Deep Tools a set of scripts for detailed cryptanalysis of the Blockchain network in cryptocurrency Bitcoin 01BlockchainGoogleDrive Parsing Blockchain in Google Drive Tutorial: youtube/ECAPypsmMQs Tutorial: cryptodeepru/blockchain-google-drive 02BreakECDSAcryptography Analyze the data from the file "RawTXjson" Scrip

Simple python3 framework to parellelise ssh key bruteforcing

ssh-keybrute Simple python3 framework to parellelise ssh key brute forcing I wrote a simple python3 native script to perform ssh key brute forcing against legacy targets (such as Debian machines affected by CVE-2008-0166) with multithreading It includes a bunch of ssh algorithm compatibilitiy flags to force modern ssh clients to connect using legacy methods and can be easily

Debian OpenSSL Predictable PRNG Exploitation. This is an integrated repo included the exploitation, usage example, data package and explanation, more.

Debian OpenSSL Predictable PRNG Links Original URL: metasploitcom/users/hdm/tools/debian-openssl/ (Mirror) Exploit: wwwexploit-dbcom/exploits/5622/ (Perl) wwwexploit-dbcom/exploits/5720/ (Python) wwwexploit-dbcom/exploits/5632/ (Ruby) Recommend Tool: Crowbar (able to brute force SSH keys) Testing Method: ssh-vulnkey & dowkdpl CV

Tool to reproduce the DSA-1571 (CVE-2008-0166) Use only for testing purposes Generate example keys and CSRs # if on 64bit machine, first simulate PIDMAX from a 32bit system: echo 32768 > /proc/sys/kernel/pid_max docker run --rm -v $(pwd):/io -it hoefling/dsa-1571 gencsr gencsr will generate keys of 512, 1024 and 2048 bits size, r

Search for BTC coins on earlier versions of Bitcoin Core with critical vulnerability OpenSSL 0.9.8 CVE-2008-0166

Search for BTC coins on earlier versions of Bitcoin Core with critical vulnerability OpenSSL 098 CVE-2008-0166 In this article, we will create a tool that will generate Bitcoin Addresses (P2PKH) using the CVE-2008-0166 vulnerability This is a research project to find BTC coins on earlier versions of the Bitcoin Core software client Random number generator 

Debian OpenSSL Predictable PRNG (CVE-2008-0166)

Crypto Deep Tools a set of scripts for detailed cryptanalysis of the Blockchain network in cryptocurrency Bitcoin

CryptoDeepTools Crypto Deep Tools a set of scripts for detailed cryptanalysis of the Blockchain network in cryptocurrency Bitcoin 01BlockchainGoogleDrive Parsing Blockchain in Google Drive Tutorial: youtube/ECAPypsmMQs Tutorial: cryptodeeptechru/blockchain-google-drive 02BreakECDSAcryptography Analyze the data from the file "RawTXjson" S

Spotting and sharing weak cryptographic key materials

Debian OpenSSL Predictable PRNG Exploitation. This is an integrated repo included the exploitation, usage example, data package and explanation, more.

CryptoDeepTools Crypto Deep Tools a set of scripts for detailed cryptanalysis of the Blockchain network in cryptocurrency Bitcoin 01BlockchainGoogleDrive Parsing Blockchain in Google Drive Tutorial: youtube/ECAPypsmMQs Tutorial: cryptodeeptechru/blockchain-google-drive 02BreakECDSAcryptography Analyze the data from the file "RawTXjson" S

Paranoid's library contains implementations of checks for well known weaknesses on cryptographic artifacts.

Project Paranoid Overview Paranoid project checks for well known weaknesses on cryptographic artifacts such as public keys, digital signatures and general pseudorandom numbers This library contains implementations and optimizations of existing work found in the literature The existing work showed that the generation of these artifacts was flawed in some cases The following

AutoRoot in Bash for KLIM machine in Hackmyvm.eu

WriteUp of KLIM (medium) of hackmyvmeu/ This is an autoroot written in bash Is required to have installed: Stegbrute curl wget ssh xterm Process: Download image BruteForce password and data extraction Extract password from extracted data RCE + LPE SCP download RSA Public Key CVE-2008-0166 SSH

CWE-338 http://www.debian.org/security/2008/dsa-1571 http://www.ubuntu.com/usn/usn-612-1 http://www.ubuntu.com/usn/usn-612-2 http://www.securityfocus.com/bid/29179 http://metasploit.com/users/hdm/tools/debian-openssl/http://www.debian.org/security/2008/dsa-1576 http://www.ubuntu.com/usn/usn-612-3 http://www.ubuntu.com/usn/usn-612-4 http://www.ubuntu.com/usn/usn-612-7 http://www.kb.cert.org/vuls/id/925211 http://www.securitytracker.com/id?1020017 http://secunia.com/advisories/30220 http://secunia.com/advisories/30221 http://secunia.com/advisories/30231 http://secunia.com/advisories/30239 http://secunia.com/advisories/30249 http://secunia.com/advisories/30136 http://sourceforge.net/mailarchive/forum.php?thread_name=48367252.7070603%40shemesh.biz&forum_name=rsyncrypto-devel http://www.us-cert.gov/cas/techalerts/TA08-137A.html https://exchange.xforce.ibmcloud.com/vulnerabilities/42375 https://www.exploit-db.com/exploits/5720 https://www.exploit-db.com/exploits/5632 https://www.exploit-db.com/exploits/5622 http://www.securityfocus.com/archive/1/492112/100/0/threaded https://nvd.nist.gov https://www.debian.org/security/./dsa-1571 https://usn.ubuntu.com/612-7/https://www.exploit-db.com/exploits/5720/https://www.kb.cert.org/vuls/id/925211

Get Started

CVE-2008-0166

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect