CVE-2013-0294

CVE-2013-0294 describes a weak random number generation vulnerability in the packet.py module of pyrad before version 2.1, affecting fedoraproject and pyrad_project distributions. This flaw allows remote attackers to more easily brute-force RADIUS authenticators and hashed passwords, potentially leading to sensitive information disclosure. With a CVSS score of 5.9 (Medium), this vulnerability has a network attack vector and high attack complexity, but could result in high confidentiality impact. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.