Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2003-0692 | First vendor Publication | 2003-10-06 |
| Vendor | Cve | Last vendor Modification | 2024-11-20 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 7.5 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| KDM in KDE 3.1.3 and earlier uses a weak session cookie generation algorithm that does not provide 128 bits of entropy, which allows attackers to guess session cookies via brute force methods and gain access to the user session. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0692 |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:215 | |||
| Oval ID: | oval:org.mitre.oval:def:215 | ||
| Title: | KDM Weak Cookie Vulnerability | ||
| Description: | KDM in KDE 3.1.3 and earlier uses a weak session cookie generation algorithm that does not provide 128 bits of entropy, which allows attackers to guess session cookies via brute force methods and gain access to the user session. | ||
| Family: | unix | Class: | vulnerability |
| Reference(s): | CVE-2003-0692 | Version: | 2 |
| Platform(s): | Red Hat Linux 9 | Product(s): | KDM |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2008-09-24 | Name : Gentoo Security Advisory GLSA 200311-01 (kdebase) File : nvt/glsa_200311_01.nasl |
| 2008-01-17 | Name : Debian Security Advisory DSA 388-1 (kdebase) File : nvt/deb_388_1.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 4772 | KDE KDM Session Cookie Generation Algorithm Weakness |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2004-09-29 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-388.nasl - Type : ACT_GATHER_INFO |
| 2004-07-31 | Name : The remote Mandrake Linux host is missing one or more security updates. File : mandrake_MDKSA-2003-091.nasl - Type : ACT_GATHER_INFO |
| 2004-07-06 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2003-270.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:23:22 |
|
| 2024-11-28 12:05:41 |
|
| 2021-05-04 12:01:59 |
|
| 2021-04-22 01:02:14 |
|
| 2020-05-23 00:15:28 |
|
| 2017-10-11 09:23:18 |
|
| 2016-10-18 12:01:13 |
|
| 2016-04-26 12:36:23 |
|
| 2014-02-17 10:26:29 |
|
| 2013-05-11 11:52:31 |
|
