CVE-2003-0094

CVE-2003-0094 describes a vulnerability in the mcookie utility within the util-linux package for Mandrake Linux 8.2 and 9.0. The patch for mcookie incorrectly utilized /dev/urandom instead of /dev/random, leading to the generation of less predictable entropy. This issue has a CVSS score of 5.0, indicating a medium severity, with a network-based attack vector and low attack complexity, potentially allowing for information disclosure. There is no evidence of active exploitation, and no public exploit code exists, though the vulnerability has garnered significant community discussion with 10 mentions.