CVE:CVE-2008-5659
CNNVD:CNNVD-200812-351
GNU Classpath是虚拟机和编译器所使用的Java的核心类库。 
GNU Classpath中的gnu.java.security.util.PRNG类默认使用毫秒时间作为内部种子，这样的种子随机性不够强，攻击者可以通过暴力猜测相对容易的破解加密例程，从而读取敏感信息。
solution:Upgrade gnu classpath to a higher version than 0.97.2,0.6,0.7,0.8,0.9,0.10,0.11,0.12,0.13,0.14,0.15,0.16,0.17,0.18,0.19,0.20,0.90,0.91,0.92,0.93,0.95,0.96,0.96.1,0.97,0.97.1,and avoid the version (,0.97.2],0.6,0.7,0.8,0.9,0.10,0.11,0.12,0.13,0.14,0.15,0.16,0.17,0.18,0.19,0.20,0.90,0.91,0.92,0.93,0.95,0.96,0.96.1,0.97,0.97.1