CVE:CVE-2001-1141
CNNVD:CNNVD-200107-064
SSLeay和OpenSSL 0.9.6b之前版本中的Pseudo-Random Number Generator (PRNG)存在漏洞。攻击者可以使用超小PRNG请求的输出来确定内部状态信息，该漏洞可能被攻击者使用来预测未来的伪随机数。
solution:Upgrade openssl openssl to a higher version than 0.9.1c,0.9.2b,0.9.3,0.9.4,0.9.5,0.9.6,0.9.6a,and avoid the version 0.9.1c,0.9.2b,0.9.3,0.9.4,0.9.5,0.9.6,0.9.6a; Upgrade ssleay ssleay to a higher version than 0.8.1,0.9,0.9.1,and avoid the version 0.8.1,0.9,0.9.1