CVE-2003-0692

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
06/10/2003
Last modified:
03/04/2025

Description

KDM in KDE 3.1.3 and earlier uses a weak session cookie generation algorithm that does not provide 128 bits of entropy, which allows attackers to guess session cookies via brute force methods and gain access to the user session.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:kde:kde:1.1:*:*:*:*:*:*:*
cpe:2.3:o:kde:kde:1.1.1:*:*:*:*:*:*:*
cpe:2.3:o:kde:kde:1.1.2:*:*:*:*:*:*:*
cpe:2.3:o:kde:kde:1.2:*:*:*:*:*:*:*
cpe:2.3:o:kde:kde:2.0:*:*:*:*:*:*:*
cpe:2.3:o:kde:kde:2.0.1:*:*:*:*:*:*:*
cpe:2.3:o:kde:kde:2.0_beta:*:*:*:*:*:*:*
cpe:2.3:o:kde:kde:2.1:*:*:*:*:*:*:*
cpe:2.3:o:kde:kde:2.1.1:*:*:*:*:*:*:*
cpe:2.3:o:kde:kde:2.1.2:*:*:*:*:*:*:*
cpe:2.3:o:kde:kde:2.2:*:*:*:*:*:*:*
cpe:2.3:o:kde:kde:2.2.1:*:*:*:*:*:*:*
cpe:2.3:o:kde:kde:2.2.2:*:*:*:*:*:*:*
cpe:2.3:o:kde:kde:3.0:*:*:*:*:*:*:*
cpe:2.3:o:kde:kde:3.0.1:*:*:*:*:*:*:*