CVE-2013-0342 in pyrad
Summary
The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
12/06/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 146806 | pyrad packet.py CreateID input validation | 20 | Not defined | Official fix | CVE-2013-0342 |