CVE-2008-1383: Gentoo Linux

Low severity, CVSS 1.9. EPSS: 0.2% chance of exploitation in the next 30 days.

The docert function in ssl-cert.eclass, when used by src_compile or src_install on Gentoo Linux, stores the SSL key in a binpkg, which allows local users to extract the key from the binpkg, and causes multiple systems that use this binpkg to have the same SSL key and certificate.

Affected products

• Gentoo Linux: any version

Published 2008-03-18. Last modified 2026-06-16.