CVE-2009-1629

ajaxterm.js in AjaxTerm 0.10 and earlier generates session IDs with predictable random numbers based on certain JavaScript functions, which makes it easier for remote attackers to (1) hijack a session or (2) cause a denial of service (session ID exhaustion) via a brute-force attack.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 75%
VendorProductVersion
antony_lesuisseajaxterm
𝑥
≤ 0.10
antony_lesuisseajaxterm
0.6
antony_lesuisseajaxterm
0.7
antony_lesuisseajaxterm
0.8
antony_lesuisseajaxterm
0.9
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ajaxterm
oneiric
not-affected
natty
not-affected
maverick
not-affected
lucid
not-affected
karmic
ignored
jaunty
ignored
intrepid
Fixed 0.10-2+lenny1build0.8.10.1
released
hardy
ignored
dapper
dne
Common Weakness Enumeration
References
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052655.html
http://secunia.com/advisories/42784
http://www.ocert.org/advisories/ocert-2009-004.html
http://www.openwall.com/lists/oss-security/2009/05/11/1
http://www.securityfocus.com/archive/1/503421/100/0/threaded
http://www.securityfocus.com/bid/34903
https://exchange.xforce.ibmcloud.com/vulnerabilities/50464
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052655.html
http://secunia.com/advisories/42784
http://www.ocert.org/advisories/ocert-2009-004.html
http://www.openwall.com/lists/oss-security/2009/05/11/1
http://www.securityfocus.com/archive/1/503421/100/0/threaded
http://www.securityfocus.com/bid/34903
https://exchange.xforce.ibmcloud.com/vulnerabilities/50464