Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A patch for mcookie in the util-linux package for Mandrake Linux 8.2 and 9.0 uses /dev/urandom instead of /dev/random, which causes mcookie to use an entropy source that is more predictable than expected, which may make it easier for certain types of attacks to succeed.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Util-Linux mcookie Cookie生成机制存在脆弱性漏洞
Vulnerability Description
util-linux包提供mcookie工具，是用于为X验证产生随机Cookie的程序。 mcookie产生的Cookie可预测，远程攻击者可以利用这个漏洞可窃取使用X验证用户的敏感信息。 由于mcookie使用/dev/urandom来生成Cookie，可导致产生的Cookie容易猜测，攻击者可以利用这个问题窃取X验证用户的认证信息，可能未授权访问系统。
CVSS Information
N/A
Vulnerability Type
N/A