Debian, Ununtu flawed for two years
By
Stewart Meagher
on
May 21, 2008 11:36AM
A research posting to the Debian security list last week has led to the confirmation of a serious hole in two flavours of the Open Sauce Linux operating system.
Frederick Lee, a researcher at insecurity company Fortify, said that the flaw, which affects Ubuntu as well as Debian, had been "seriously underestimated " as it makes the Secure Sockets Layer (SSL) of the two Linux sustems vulnerable to malicious attack.
"We're calling this vulnerability 'insecure randomness' since it allows an attacker to predict the SSL cryptographic keys used for supposedly secure online transactions," he said.
Lee reckons that the flaw, which tinkers with the randomness engine used to encrypt secure transactions, could be used to intercept traffic between a user and supposedly secure connection between a user and, for example, an online banking site.
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
Promoted Content
Why rethinking your CMS is crucial for customer retention
Promoted Content
The Great Resignation has intensified insider security threats
.png&h=183&w=300&c=1&s=0)
Promoted Content
Accenture and Google Cloud team up to create a loveable, Australian-first, renewable energy product
Promoted Content
How to turn digital complexity into competitive advantage
Sponsored Whitepapers
Free eBook: Digital Transformation 101 – for banks
Why financial services need to tackle their Middle Office
Learn: The latest way to transfer files between customers
Extracting the value of data using Unified Observability
Planning before the breach: You can’t protect what you can’t see
.jpg&h=271&w=480&c=1&s=1)
