CVE

Id
7516  
CVE No.
CVE-2003-0692  
Status
Candidate  
Description
KDM in KDE 3.1.3 and earlier uses a weak session cookie generation algorithm that does not provide 128 bits of entropy, which allows attackers to guess session cookies via brute force methods and gain access to the user session.  
Phase
Assigned (20030814)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
44097 7516 CVE-2003-0692 MISC:http://cert.uni-stuttgart.de/archive/suse/security/2002/12/msg00101.html  View
44098 7516 CVE-2003-0692 CONFIRM:http://www.kde.org/info/security/advisory-20030916-1.txt  View
44099 7516 CVE-2003-0692 BUGTRAQ:20030916 [KDE SECURITY ADVISORY] KDM vulnerabilities  View
44100 7516 CVE-2003-0692 URL:http://marc.info/?l=bugtraq&m=106374551513499&w=2  View
44101 7516 CVE-2003-0692 DEBIAN:DSA-388  View
44102 7516 CVE-2003-0692 URL:http://www.debian.org/security/2003/dsa-388  View
44103 7516 CVE-2003-0692 MANDRAKE:MDKSA-2003:091  View
44104 7516 CVE-2003-0692 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2003:091  View
44105 7516 CVE-2003-0692 REDHAT:RHSA-2003:270  View
44106 7516 CVE-2003-0692 URL:http://www.redhat.com/support/errata/RHSA-2003-270.html  View
44107 7516 CVE-2003-0692 CONECTIVA:CLA-2003:747  View
44108 7516 CVE-2003-0692 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000747  View
44109 7516 CVE-2003-0692 REDHAT:RHSA-2003:288  View
44110 7516 CVE-2003-0692 URL:http://www.redhat.com/support/errata/RHSA-2003-288.html  View
44111 7516 CVE-2003-0692 OVAL:oval:org.mitre.oval:def:215  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63548 JVNDB-2003-000274 OpenSSH の buffer_append_space() 関数におけるヒープ領域が破壊される脆弱性 ------------ CVE-2003-0693 7516 10 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000274.html  View