← Back

CVE-2003-0692

nvd nist
Published: Oct 6, 2003Modified: Apr 16, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

KDM in KDE 3.1.3 and earlier uses a weak session cookie generation algorithm that does not provide 128 bits of entropy, which allows attackers to guess session cookies via brute force methods and gain access to the user session.

Affected (27)

Products: Kde: Kde
Kde
1 product
Kde
Configuration A
27 vulnerable
Vulnerable SoftwareAffected Versions
Kde
Kde
Version 1.1.1
Kde
Version 1.1.2
Kde
Version 1.1
Kde
Version 1.2
Kde
Version 2.0.1
Kde
Version 2.0
Kde
Version 2.0_beta
Kde
Version 2.1.1
Kde
Version 2.1.2
Kde
Version 2.1
Kde
Version 2.2.1
Kde
Version 2.2.2
Kde
Version 2.2
Kde
Version 3.0.1
Kde
Version 3.0.2
Kde
Version 3.0.3
Kde
Version 3.0.3a
Kde
Version 3.0.4
Kde
Version 3.0.5
Kde
Version 3.0.5a
Kde
Version 3.0.5b
Kde
Version 3.0
Kde
Version 3.1.1
Kde
Version 3.1.1a
Kde
Version 3.1.2
Kde
Version 3.1.3
Kde
Version 3.1

References (18)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.