PublicDate: 2008-01-16 23:00:00 UTC
Candidate: CVE-2008-0299
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0299
 http://www.lag.net/pipermail/paramiko/2008-January/000599.html
Description:
 common.py in Paramiko 1.7.1 and earlier, when using threads or forked
 processes, does not properly use RandomPool, which allows one session to
 obtain sensitive information from another session by predicting the state
 of the pool.
Ubuntu-Description:
Notes:
Bugs:
Priority: low
Discovered-by:
Assigned-to:
CVSS: 

Patches_paramiko:
upstream_paramiko: released (1.7.2)
dapper_paramiko: ignored (reached end-of-life)
edgy_paramiko: needed (reached end-of-life)
feisty_paramiko: needed (reached end-of-life)
gutsy_paramiko: needed (reached end-of-life)
hardy_paramiko: ignored (reached end-of-life)
intrepid_paramiko: not-affected (1.7.3-1)
jaunty_paramiko: not-affected (1.7.3-1)
karmic_paramiko: not-affected (1.7.3-1)
lucid_paramiko: not-affected (1.7.3-1)
maverick_paramiko: not-affected (1.7.3-1)
natty_paramiko: not-affected (1.7.3-1)
devel_paramiko: not-affected (1.7.3-1)