CVE-2013-0342

Published: Dec 9, 2019Modified: Nov 21, 2024

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294.

Affected (1)

Products: Pyrad Project: Pyrad

Pyrad Project

1 product

Pyrad

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Pyrad Project Pyrad	Before 2.1

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (14)

http://www.openwall.com/lists/oss-security/2013/02/15/9

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2013/02/21/27

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2013/02/22/2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/57984

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=911685

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/82134

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://github.com/pyradius/pyrad/commit/38f74b36814ca5b1a27d9898141126af4953bee5

Source: secalert@redhat.com

Third Party Advisory

http://www.openwall.com/lists/oss-security/2013/02/15/9