Vulnerability in Andries Brouwer Util-Linux
CVE-2003-0094
A patch for mcookie in the util-linux package for Mandrake Linux 8.2 and 9.0 uses /dev/urandom instead of /dev/random, which causes mcookie to use an entropy source that is more predictable than expected, which may make it easier for certain types of attacks to succeed.
EPSS: 0.015 (72.5th percentile) — read the EPSS interpretation.
Affected products
- Andries_brouwer Util-linux — versions 2.11n, 2.11u
- N/a — versions n/a
References
- cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_BID)