Skip to content
OpenAdvisories
Unscored CVE-2003-0094 EUVD-2003-0090GHSA-vhww-qqjw-px6w

A patch for mcookie in the util-linux package for Mandrake Linux 8.2 and 9.0 uses /dev/urandom instead of /dev/random, which causes mcookie…

Published Sep 1, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

A patch for mcookie in the util-linux package for Mandrake Linux 8.2 and 9.0 uses /dev/urandom instead of /dev/random, which causes mcookie to use an entropy source that is more predictable than expected, which may make it easier for certain types of attacks to succeed.

References