CVE-2016-2379
CVE-2016-2379
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to (1) decrypt hashed passwords by leveraging knowledge of client registration codes or (2) gain login access by eavesdropping on login messages and re-using the hashed passwords.
CVSS 8.8 · High · EPSS 0.4%
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
pidgin Ubuntu:14.04:LTS
- Versions
- 1:2.10.7-0ubuntu4.1
- 1:2.10.7-0ubuntu4.2
- 1:2.10.9-0ubuntu1
- 1:2.10.9-0ubuntu2
- 1:2.10.9-0ubuntu3
- 1:2.10.9-0ubuntu3.1
- 1:2.10.9-0ubuntu3.2
- 1:2.10.9-0ubuntu3.3
- 1:2.10.9-0ubuntu3.4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pidgin Ubuntu:16.04:LTS
- Versions
- 1:2.10.11-0ubuntu4
- 1:2.10.11-0ubuntu5
- 1:2.10.12-0ubuntu1
- 1:2.10.12-0ubuntu2
- 1:2.10.12-0ubuntu3
- 1:2.10.12-0ubuntu4
- 1:2.10.12-0ubuntu5
- 1:2.10.12-0ubuntu5.1
- 1:2.10.12-0ubuntu5.2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published