CVE-2016-2379 | BDVDB-2026-83330 Detail

Description#

The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to (1) decrypt hashed passwords by leveraging knowledge of client registration codes or (2) gain login access by eavesdropping on login messages and re-using the hashed passwords.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/91335
https://security.gentoo.org/glsa/201701-38
https://pidgin.im/news/security/?id=95
http://www.talosintelligence.com/reports/TALOS-2016-0122/

Exploit#

No public exploit known

History#

Version 12017-03-29Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.