PT-2019-6844 · Pyrad+1 · Pyrad+1

Nathaniel Mccallum · Publicado 2019-12-09 · Atualizado 2022-05-05 · CVE-2013-0342

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Média

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions pyrad versions prior to 2.1

Description The issue concerns the CreateID function in packet.py, which uses sequential packet IDs. This predictability makes it easier for remote attackers to spoof packets.

Recommendations For versions prior to 2.1, update to version 2.1 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2013-0342

GHSA-W4PX-9PGM-P2F3

PYSEC-2019-154

Produtos afetados

Debian

Pyrad

Referências · 22

• https://github.com/pyradius/pyrad/commit/38f74b36814ca5b1a27d9898141126af4953bee5 · Nota
• https://github.com/pyradius/pyrad · Nota
• https://github.com/pypa/advisory-database/tree/main/vulns/pyrad/PYSEC-2019-154.yaml · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-0342 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2013-0342 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-w4px-9pgm-p2f3 · Aviso do Fabricante
• https://packages.debian.org/src:pyrad · Nota
• https://security-tracker.debian.org/tracker/source-package/pyrad · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0342 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2013-0342 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/82134 · Nota
• https://osv.dev/vulnerability/CVE-2013-0342 · Aviso do Fabricante
• https://web.archive.org/web/20200302193833/http://securityfocus.com/bid/57984 · Nota
• http://openwall.com/lists/oss-security/2013/02/15/9 · Nota
• http://openwall.com/lists/oss-security/2013/02/21/27 · Nota