CVE:CVE-2011-0766
CNNVD:CNNVD-201105-266
Erlang/OTP ssh库R14B03之前版本中使用的Crypto application 2.0.2.2之前版本和SSH 2.0.5之前版本中存在不安全随机数产生漏洞。远程攻击者可以利用该漏洞获得对Digital Signature Algorithm（DSA）主键和SSH会话密钥的访问。
solution:Upgrade erlang crypto to a higher version than 2.0.2.1,1.0,1.1,1.1.1,1.1.2,1.1.3,1.2,1.2.1,1.2.2,1.2.3,1.3,1.4,1.5,1.5.1.1,1.5.2,1.5.2.1,1.5.3,1.6,1.6.1,1.6.2,1.6.3,1.6.4,2.0,2.0.1,2.0.2,and avoid the version (,2.0.2.1],1.0,1.1,1.1.1,1.1.2,1.1.3,1.2,1.2.1,1.2.2,1.2.3,1.3,1.4,1.5,1.5.1.1,1.5.2,1.5.2.1,1.5.3,1.6,1.6.1,1.6.2,1.6.3,1.6.4,2.0,2.0.1,2.0.2; Upgrade erlang erlang/otp to a higher version than r14b02,r11b-5,r12b-5,r13b,r13b02-1,r13b03,r13b04,r14a,r14b,r14b01,and avoid the version (,r14b02],r11b-5,r12b-5,r13b,r13b02-1,r13b03,r13b04,r14a,r14b,r14b01; Upgrade ssh ssh to a higher version than 2.0.4,1.2.0,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.2.8,1.2.9,1.2.10,1.2.11,1.2.12,1.2.13,1.2.14,1.2.15,1.2.16,1.2.17,1.2.18,1.2.19,1.2.20,1.2.21,1.2.22,1.2.23,1.2.24,1.2.25,1.2.26,1.2.27,1.2.28,1.2.29,1.2.30,1.2.31,and avoid the version (,2.0.4],1.2.0,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.2.8,1.2.9,1.2.10,1.2.11,1.2.12,1.2.13,1.2.14,1.2.15,1.2.16,1.2.17,1.2.18,1.2.19,1.2.20,1.2.21,1.2.22,1.2.23,1.2.24,1.2.25,1.2.26,1.2.27,1.2.28,1.2.29,1.2.30,1.2.31