description: packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute force attack.
problem types: Cryptography
affected:
{
product: pyrad
vendor: pyrad
versions:
status: affected, version: before 2.1
}