CVE-2003-0094

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2003-03-03 · updated 2026-06-16

Description

A patch for mcookie in the util-linux package for Mandrake Linux 8.2 and 9.0 uses /dev/urandom instead of /dev/random, which causes mcookie to use an entropy source that is more predictable than expected, which may make it easier for certain types of attacks to succeed.

Affected products

Andries Brouwer Util-Linux: 2.11n, 2.11u

References

http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:016
http://www.securityfocus.com/bid/6855
https://exchange.xforce.ibmcloud.com/vulnerabilities/11318
http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:016
http://www.securityfocus.com/bid/6855
https://exchange.xforce.ibmcloud.com/vulnerabilities/11318

Get alerted when CVE-2003-0094 or the next vulnerability affects your stack