CVE-2003-0692 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2003-0692
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2003-0692

Description: KDM in KDE 3.1.3 and earlier uses a weak session cookie generation algorithm that does not provide 128 bits of entropy, which allows attackers to guess session cookies via brute force methods and gain access to the user session.

CVE Status: Candidate

References: REDHAT http://www.redhat.com/support/errata/RHSA-2003-288.html http://www.redhat.com/support/errata/RHSA-2003-270.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:215 MISC http://cert.uni-stuttgart.de/archive/suse/security/2002/12/msg00101.html MANDRAKE http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:091 DEBIAN http://www.debian.org/security/2003/dsa-388 CONFIRM http://www.kde.org/info/security/advisory-20030916-1.txt CONECTIVA http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000747 BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=106374551513499&w=2

Return to the previous page.