CVE-2016-2379: Weak Encryption
The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to (1) decrypt hashed passwords by leveraging knowledge of client registration codes or (2) gain login access by eavesdropping on login messages and re-using the hashed passwords.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-2379?
CVE-2016-2379 is considered a medium severity vulnerability due to its potential to expose user credentials.
How do I fix CVE-2016-2379?
To fix CVE-2016-2379, update to the latest version of Pidgin that addresses this vulnerability.
What types of attacks are possible due to CVE-2016-2379?
CVE-2016-2379 could allow attackers to decrypt hashed passwords or gain unauthorized login access.
Who is affected by CVE-2016-2379?
Users of the Pidgin client utilizing the Mxit protocol are affected by CVE-2016-2379.
What causes CVE-2016-2379?
CVE-2016-2379 is caused by the use of weak encryption methods for password storage in the Mxit protocol.