CVE-2016-2379

NONE EPSS 31.9%
Published Mar 29, 20179y ago · Modified Jun 17, 20262w ago
Find Similar
Published Mar 29, 2017 9y ago
Last Modified Jun 17, 2026 2w ago

Description

The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to (1) decrypt hashed passwords by leveraging knowledge of client registration codes or (2) gain login access by eavesdropping on login messages and re-using the hashed passwords.

Threat Intelligence

EPSS Exploit Probability
31.9% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-326

Affected Products 1

VendorProductVersionRange
pidginmxit*any

References 4

  • securityfocus.com http://www.securityfocus.com/bid/91335
    Third Party AdvisoryVDB Entry
  • talosintelligence.com http://www.talosintelligence.com/reports/TALOS-2016-0122/
    Third Party Advisory
  • pidgin.im https://pidgin.im/news/security/?id=95
    Vendor Advisory
  • security.gentoo.org https://security.gentoo.org/glsa/201701-38
    Third Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.