Lucene search
K

7 matches found

OSV
OSV
added 2022/05/05 12:29 a.m.4 views

GHSA-W4PX-9PGM-P2F3 pyrad uses sequential packet IDs

The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294...

5.3CVSS5.5AI score0.0129EPSS
Exploits0References10
NVD
NVD
added 2019/12/09 9:15 p.m.13 views

CVE-2013-0342

The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294...

4.3CVSS4.8AI score0.0129EPSS
Exploits0References7
OSV
OSV
added 2019/12/09 9:15 p.m.0 views

UBUNTU-CVE-2013-0342

The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294...

4.3CVSS5.8AI score0.0129EPSS
Exploits0References2
Prion
Prion
added 2019/12/09 9:15 p.m.9 views

Security feature bypass

The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294...

4.3CVSS5.6AI score0.01772EPSS
Exploits0References7Affected Software1
CVE
CVE
added 2019/12/09 8:55 p.m.53 views

CVE-2013-0342

CVE-2013-0342 affects the pyrad library: the CreateID function in packet.py prior to 2.1 uses sequential packet IDs, making it easier for remote attackers to spoof RADIUS packets by predicting the next ID. This vulnerability is described in related sources (e.g., Nessus plugin references) as a se...

4.3CVSS4.7AI score0.0129EPSS
Exploits0References7Affected Software1
Debian CVE
Debian CVE
added 2019/12/09 8:55 p.m.16 views

CVE-2013-0342

The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294...

4.3CVSS4.6AI score0.0129EPSS
Exploits0
FreeBSD
FreeBSD
added 2013/01/15 12:0 a.m.19 views

pyrad -- multiple vulnerabilities

Nathaniel McCallum reports: packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute force attack. The CreateID function in packet.py in pyrad before 2.1 uses...

5.9CVSS5AI score0.01772EPSS
Exploits0References2
Rows per page
Query Builder