Skip to content
OpenAdvisories
Unscored DSA-1994-1 1 CVE

ajaxterm - session hijacking

Published Feb 11, 2010 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 4.0 ajaxterm 0.9-2+etch1
Debian · 5.0 ajaxterm 0.10-2+lenny1

Vulnerabilities 1

  • Unscored —

    ajaxterm.js in AjaxTerm 0.10 and earlier generates session IDs with predictable random numbers based on certain JavaScr…