CVE-2003-0094: A patch for mcookie in the util-linux package for Mandrake Linux 8.2 and 9.0 uses /dev/urandom instead of /...

Security readout for executives and security teams

This CVE concerns an old Mandrake Linux patch that made mcookie use a weaker-than-expected randomness source. If affected systems still exist, security values generated by mcookie may be easier to predict, increasing risk for attacks that depend on guessing those values. Exposure is most likely limited to legacy Mandrake Linux 8.2 and 9.0 systems using the affected util-linux mcookie package. The source bundle lists affected vendor and product metadata as unavailable, so scope beyond those releases is not evidenced. Treat this as a legacy-system hygiene issue unless affected Mandrake hosts still support sensitive operations. If such systems exist, prioritize remediation because predictable security values can undermine authentication or session protections. Mitigation focus: Inventory any remaining Mandrake Linux 8.2 or 9.0 systems.; Check Mandrake advisory MDKSA-2003:016 for fixed util-linux packages.; Replace unsupported legacy systems where vendor updates are unavailable..

Prepared

Jun 30, 2026, 03:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.