Описание
packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute force attack.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| pyrad | fixed | 2.0-2 | package | |
| pyrad | fixed | 1.2-1+deb7u2 | wheezy | package |
| pyrad | fixed | 1.2-1+deb6u1 | squeeze | package |
EPSS
Процентиль: 86%
0.02857
Низкий
Связанные уязвимости
CVSS3: 5.9
ubuntu
больше 6 лет назад
packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute force attack.
CVSS3: 5.9
nvd
больше 6 лет назад
packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute force attack.
CVSS3: 5.9
github
больше 4 лет назад
pyrad is vulnerable to the use of Insufficiently Random Values
EPSS
Процентиль: 86%
0.02857
Низкий