KDM in KDE 3.1.3 and earlier uses a weak session cookie... · CVE-2003-0692 · GitHub Advisory Database · GitHub

KDM in KDE 3.1.3 and earlier uses a weak session cookie...

High severity Unreviewed Published Apr 29, 2022 to the GitHub Advisory Database • Updated Jan 30, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

KDM in KDE 3.1.3 and earlier uses a weak session cookie generation algorithm that does not provide 128 bits of entropy, which allows attackers to guess session cookies via brute force methods and gain access to the user session.

References

Published by the National Vulnerability Database

Oct 6, 2003

Published to the GitHub Advisory Database Apr 29, 2022

Last updated Jan 30, 2023