Lucene search
+L

7 matches found

OSV
OSV
•added 2022/05/05 12:29 a.m.•25 views

GHSA-W4PX-9PGM-P2F3 pyrad uses sequential packet IDs

The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294...

5.3CVSS5.5AI score0.01556EPSS
SaveExploits0References10
NVD
NVD
•added 2019/12/09 9:15 p.m.•32 views

CVE-2013-0342

The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294...

4.3CVSS4.8AI score0.01556EPSS
SaveExploits0References7
OSV
OSV
•added 2019/12/09 9:15 p.m.•12 views

UBUNTU-CVE-2013-0342

The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294...

4.3CVSS5.8AI score0.01556EPSS
SaveExploits0References2
Prion
Prion
•added 2019/12/09 9:15 p.m.•19 views

Security feature bypass

The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294...

4.3CVSS5.6AI score0.02857EPSS
SaveExploits0References7Affected Software1
Debian CVE
Debian CVE
•added 2019/12/09 8:55 p.m.•81 views

CVE-2013-0342

The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294...

4.3CVSS4.6AI score0.01556EPSS
SaveExploits0
CVE
CVE
•added 2019/12/09 8:55 p.m.•79 views

CVE-2013-0342

CVE-2013-0342 affects the pyrad library: the CreateID function in packet.py prior to 2.1 uses sequential packet IDs, making it easier for remote attackers to spoof RADIUS packets by predicting the next ID. This vulnerability is described in related sources (e.g., Nessus plugin references) as a se...

4.3CVSS4.7AI score0.01556EPSS
SaveExploits0References7Affected Software1
FreeBSD
FreeBSD
•added 2013/01/15 12:00 a.m.•40 views

pyrad -- multiple vulnerabilities

Nathaniel McCallum reports: packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute force attack. The CreateID function in packet.py in pyrad before 2.1 uses...

5.9CVSS5AI score0.02857EPSS
SaveExploits0References2
Rows per page
Query Builder