medium5.9
CVE-2013-0294
packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obta…
Impact
packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute force attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pyrad Project | Pyrad | before 2.1 |
| Fedoraproject | Fedora | Versions 18, 19, 20 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115677.html
- http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115705.html
- http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116567.html
- http://www.openwall.com/lists/oss-security/2013/02/15/13
- http://www.securityfocus.com/bid/57984
- https://bugzilla.redhat.com/show_bug.cgi?id=911682
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82133
- https://github.com/wichert/pyrad/commit/38f74b36814ca5b1a27d9898141126af4953bee5
- http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115677.html
- http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115705.html
- http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116567.html
- http://www.openwall.com/lists/oss-security/2013/02/15/13
- http://www.securityfocus.com/bid/57984
- https://bugzilla.redhat.com/show_bug.cgi?id=911682
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82133
- https://github.com/wichert/pyrad/commit/38f74b36814ca5b1a27d9898141126af4953bee5