KDE KDM Session Cookie Generation Weakness

Bugtraq ID:	8636
Class:	Design Error
CVE:	CVE-2003-0692
Remote:	Yes
Local:	No
Published:	Sep 16 2003 12:00AM
Updated:	Jul 11 2009 11:56PM
Credit:	Vulnerability disclosed by an unidentified source.
Vulnerable:	SGI ProPack 2.3 SGI ProPack 2.2.1 KDE KDE 3.1.3 + Redhat Desktop 3.0 + Redhat Desktop 3.0 + Redhat Enterprise Linux AS 3 + Redhat Enterprise Linux AS 3 + Redhat Enterprise Linux ES 3 + Redhat Enterprise Linux ES 3 + Redhat Enterprise Linux WS 3 KDE KDE 3.1.2 + KDE KDE 3.1.2 KDE KDE 3.1.1 a KDE KDE 3.1.1 + S.u.S.E. Linux Personal 8.2 + S.u.S.E. Linux Personal 8.2 KDE KDE 3.1 + Redhat Linux 9.0 i386 + SuSE Linux 8.1 + SuSE Linux 8.1 KDE KDE 3.0.5 b KDE KDE 3.0.5 a + Redhat Linux 8.0 i386 + Redhat Linux 7.3 i386 + Redhat Linux 7.3 i386 KDE KDE 3.0.5 KDE KDE 3.0.4 + Gentoo Linux 1.4 _rc1 + Gentoo Linux 1.2 + Gentoo Linux 1.2 KDE KDE 3.0.3 a KDE KDE 3.0.3 + Conectiva Linux Enterprise Edition 1.0 + FreeBSD FreeBSD 4.7 -STABLE + FreeBSD FreeBSD 4.7 -STABLE + Mandriva Linux Mandrake 9.0 + Mandriva Linux Mandrake 9.0 KDE KDE 3.0.2 + Mandriva Linux Mandrake 8.2 KDE KDE 3.0.1 KDE KDE 3.0 KDE KDE 2.2.2 + Debian Linux 3.0 sparc + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Debian Linux 3.0 alpha + Debian Linux 3.0 + Debian Linux 3.0 + Debian Linux 2.2 sparc + Debian Linux 2.2 powerpc + Debian Linux 2.2 IA-32 + Debian Linux 2.2 arm + Debian Linux 2.2 alpha + Debian Linux 2.2 68k + Debian Linux 2.2 + Mandriva Linux Mandrake 8.2 ppc + Mandriva Linux Mandrake 8.2 ppc + Mandriva Linux Mandrake 8.2 + Mandriva Linux Mandrake 8.2 + Mandriva Linux Mandrake 8.1 ia64 + Mandriva Linux Mandrake 8.1 ia64 + Mandriva Linux Mandrake 8.1 + Mandriva Linux Mandrake 8.1 + Redhat Advanced Workstation for the Itanium Processor 2.1 + Redhat Enterprise Linux AS 2.1 IA64 + Redhat Enterprise Linux AS 2.1 IA64 + Redhat Enterprise Linux AS 2.1 + Redhat Enterprise Linux AS 2.1 + Redhat Enterprise Linux ES 2.1 IA64 + Redhat Enterprise Linux ES 2.1 IA64 + Redhat Enterprise Linux ES 2.1 + Redhat Enterprise Linux ES 2.1 + Redhat Enterprise Linux WS 2.1 IA64 + Redhat Enterprise Linux WS 2.1 IA64 + Redhat Enterprise Linux WS 2.1 + Redhat Enterprise Linux WS 2.1 + Redhat Linux 7.2 ia64 + Redhat Linux 7.2 ia64 + Redhat Linux 7.2 i386 + Redhat Linux 7.2 i386 + Redhat Linux 7.1 i386 + Redhat Linux 7.1 i386 + Redhat Linux Advanced Work Station 2.1 + Sun Linux 5.0.7 + Sun Linux 5.0.7 + Sun Linux 5.0.6 + Sun Linux 5.0.6 + Sun Linux 5.0.5 + Sun Linux 5.0.5 KDE KDE 2.2.1 + Caldera OpenLinux Server 3.1.1 + Caldera OpenLinux Server 3.1.1 + Caldera OpenLinux Server 3.1 + Caldera OpenLinux Server 3.1 + Caldera OpenLinux Workstation 3.1.1 + Caldera OpenLinux Workstation 3.1 + Caldera OpenLinux Workstation 3.1 + Mandriva Linux Mandrake 8.1 ia64 + Mandriva Linux Mandrake 8.1 KDE KDE 2.2 KDE KDE 2.1.2 KDE KDE 2.1.1 KDE KDE 2.1 KDE KDE 2.0.1 KDE KDE 2.0 BETA KDE KDE 2.0 KDE KDE 1.2 - SuSE Linux 6.4 KDE KDE 1.1.2 + Caldera OpenLinux 2.3 + Mandriva Linux Mandrake 7.0 KDE KDE 1.1.1 KDE KDE 1.1
Not Vulnerable:

KDE KDM Session Cookie Generation Weakness

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

KDE KDM Session Cookie Generation Weakness

References:

• CLSA-2003:770 - Several vulnerabilities - Konqueror and KDM (Conectiva)
  
• RHSA-2003-270 (Red Hat)
  
• Sun Linux Support - Sun Linux Patches (Sun)
  
• [KDE SECURITY ADVISORY] KDM vulnerabilities (Dirk Mueller )