HC's Capture the Flag website
CTF Contests
25C3-CTF

25C3-CTF final results

Advisory #54

From team Janet Reno Redemption Fund$

New advisory by : adc
Affected service(s): VDspi
Severity [lmh] : medium

===== Problem =====
IDs are not sufficiently random
===== Impact =====
you can predict ids and steal information (flags)
===== Fix =====
use larger numbers and make them random


Rating

[2] correct.

Go back


Impressum