Unrated severityNVD Advisory· Published May 14, 2009· Updated Jun 16, 2026
CVE-2009-1629
CVE-2009-1629
Description
ajaxterm.js in AjaxTerm 0.10 and earlier generates session IDs with predictable random numbers based on certain JavaScript functions, which makes it easier for remote attackers to (1) hijack a session or (2) cause a denial of service (session ID exhaustion) via a brute-force attack.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:antony_lesuisse:ajaxterm:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:antony_lesuisse:ajaxterm:*:*:*:*:*:*:*:*range: <=0.10
- cpe:2.3:a:antony_lesuisse:ajaxterm:0.6:*:*:*:*:*:*:*
- cpe:2.3:a:antony_lesuisse:ajaxterm:0.7:*:*:*:*:*:*:*
- cpe:2.3:a:antony_lesuisse:ajaxterm:0.8:*:*:*:*:*:*:*
- cpe:2.3:a:antony_lesuisse:ajaxterm:0.9:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
7- www.ocert.org/advisories/ocert-2009-004.htmlnvdExploit
- www.openwall.com/lists/oss-security/2009/05/11/1nvdExploit
- lists.fedoraproject.org/pipermail/package-announce/2010-December/052655.htmlnvd
- secunia.com/advisories/42784nvd
- www.securityfocus.com/archive/1/503421/100/0/threadednvd
- www.securityfocus.com/bid/34903nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/50464nvd
News mentions
0No linked articles in our index yet.