CVE ID:	CVE-2003-0692
Description:	KDM in KDE 3.1.3 and earlier uses a weak session cookie generation algorithm that does not provide 128 bits of entropy, which allows attackers to guess session cookies via brute force methods and gain access to the user session.
Test IDs:	1.3.6.1.4.1.25623.1.0.53672   1.3.6.1.4.1.25623.1.0.51023
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0692 Bugtraq: 20030916 [KDE SECURITY ADVISORY] KDM vulnerabilities (Google Search) http://marc.info/?l=bugtraq&m=106374551513499&w=2 Conectiva Linux advisory: CLA-2003:747 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000747 Debian Security Information: DSA-388 (Google Search) http://www.debian.org/security/2003/dsa-388 http://www.mandriva.com/security/advisories?name=MDKSA-2003:091 http://cert.uni-stuttgart.de/archive/suse/security/2002/12/msg00101.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A215 RedHat Security Advisories: RHSA-2003:270 http://www.redhat.com/support/errata/RHSA-2003-270.html RedHat Security Advisories: RHSA-2003:288 http://www.redhat.com/support/errata/RHSA-2003-288.html