VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 3, 2003· Updated Apr 16, 2026

CVE-2003-0094

CVE-2003-0094

Description

A patch for mcookie in the util-linux package for Mandrake Linux 8.2 and 9.0 uses /dev/urandom instead of /dev/random, which causes mcookie to use an entropy source that is more predictable than expected, which may make it easier for certain types of attacks to succeed.

Affected products

2
  • Andries Brouwer/Util Linux2 versions
    cpe:2.3:a:andries_brouwer:util-linux:2.11n:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:andries_brouwer:util-linux:2.11n:*:*:*:*:*:*:*
    • cpe:2.3:a:andries_brouwer:util-linux:2.11u:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.