CVE-2003-0094 Weak cryptography in n/a

Medium 5.0 Published 1 Sep 2004 Updated 8 Aug 2024

Mandrake Linux mcookie utility uses predictable entropy, weakening random number generation and potentially aiding cryptographic attacks.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Not stated
Victim action needed: Not needed
Fix: None listed

What is CVE-2003-0094?

CVE-2003-0094 is a medium-severity vulnerability in n/a, published on 1 Sep 2004.

Official description

A patch for mcookie in the util-linux package for Mandrake Linux 8.2 and 9.0 uses /dev/urandom instead of /dev/random, which causes mcookie to use an entropy source that is more predictable than expected, which may make it easier for certain types of attacks to succeed.

Which versions are affected by CVE-2003-0094?

It affects 1 product.

Products include Andries Brouwer Util-Linux.

How do I fix CVE-2003-0094?

No fix has been published for CVE-2003-0094 yet. Limit exposure of the affected software until one is available.

Is CVE-2003-0094 being exploited?

There is no known exploitation of CVE-2003-0094 in the wild and no public exploit code.

Sources

Also known as GHSA-vhww-qqjw-px6w.