← Back

Pyrad

pyrad

Vendor: Pyrad Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2013-0294
2Fedoraproject
Pyrad Project
2Fedora
Pyrad
Nov 21, 2024
Jan 28, 2020
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute force attack.
CVE-2013-0342
1Pyrad Project
1Pyrad
Nov 21, 2024
Dec 9, 2019
N/A· v4
4.3 MEDIUM· v3
4.3 MEDIUM· v2
The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294.