CVE-2013-0342

Опубликовано: 09 дек. 2019

Источник: nvd

CVSS3: 4.3

CVSS2: 4.3

EPSS Низкий

Описание

The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294.

Ссылки

http://www.openwall.com/lists/oss-security/2013/02/15/9
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/02/21/27
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/02/22/2
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/57984
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=911685
Issue Tracking
Patch
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/82134
Third Party Advisory
VDB Entry
https://github.com/pyradius/pyrad/commit/38f74b36814ca5b1a27d9898141126af4953bee5
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/02/15/9
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/02/21/27
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/02/22/2
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/57984
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=911685
Issue Tracking
Patch
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/82134
Third Party Advisory
VDB Entry
https://github.com/pyradius/pyrad/commit/38f74b36814ca5b1a27d9898141126af4953bee5
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:pyrad_project:pyrad:*:*:*:*:*:*:*:*

Версия до 2.1 (исключая)

EPSS

Процентиль: 79%

0.0129

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2013-0342

CVSS3: 4.3

ubuntu

около 6 лет назад

CVE-2013-0342

CVSS3: 4.3

debian

около 6 лет назад

The CreateID function in packet.py in pyrad before 2.1 uses sequential ...

GHSA-w4px-9pgm-p2f3

CVSS3: 4.3

github

почти 4 года назад

pyrad uses sequential packet IDs

EPSS

Процентиль: 79%

0.0129

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-20