Skip to content
OpenAdvisories

Package · Debian

pyrad

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.9
    CVE-2013-0294

    pyrad is vulnerable to the use of Insufficiently Random Values

    packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute force attack.

    pyrad pyrad pyrad pyrad Debian PyPI
  • Medium 4.3
    CVE-2013-0342

    pyrad uses sequential packet IDs

    The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294.

    pyrad pyrad pyrad pyrad Debian Ubuntu PyPI