CVE-2003-0094: Andries Brouwer Util-Linux

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

A patch for mcookie in the util-linux package for Mandrake Linux 8.2 and 9.0 uses /dev/urandom instead of /dev/random, which causes mcookie to use an entropy source that is more predictable than expected, which may make it easier for certain types of attacks to succeed.

Affected products

• Andries Brouwer Util-Linux: version 2.11n only; version 2.11u only

Published 2003-03-03. Last modified 2026-06-16.