CVE-2016-2379 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2016-2379 Interim 1 16 2023-06-27T00:23:36Z current 2021-05-30T13:39:38Z 2023-06-27T00:23:36Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2016-2379 The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to (1) decrypt hashed passwords by leveraging knowledge of client registration codes or (2) gain login access by eavesdropping on login messages and re-using the hashed passwords. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP1 finch finch-devel libpurple libpurple-devel libpurple-lang libpurple-meanwhile libpurple-tcl pidgin pidgin-devel finch as a component of SUSE Linux Enterprise Desktop 12 libpurple as a component of SUSE Linux Enterprise Desktop 12 libpurple-lang as a component of SUSE Linux Enterprise Desktop 12 libpurple-meanwhile as a component of SUSE Linux Enterprise Desktop 12 libpurple-tcl as a component of SUSE Linux Enterprise Desktop 12 pidgin as a component of SUSE Linux Enterprise Desktop 12 finch as a component of SUSE Linux Enterprise Desktop 12 SP1 libpurple as a component of SUSE Linux Enterprise Desktop 12 SP1 libpurple-lang as a component of SUSE Linux Enterprise Desktop 12 SP1 libpurple-meanwhile as a component of SUSE Linux Enterprise Desktop 12 SP1 libpurple-tcl as a component of SUSE Linux Enterprise Desktop 12 SP1 pidgin as a component of SUSE Linux Enterprise Desktop 12 SP1 finch as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 finch-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libpurple as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libpurple-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libpurple-lang as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 pidgin as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 pidgin-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 finch-devel as a component of SUSE Linux Enterprise Software Development Kit 12 libpurple as a component of SUSE Linux Enterprise Software Development Kit 12 libpurple-devel as a component of SUSE Linux Enterprise Software Development Kit 12 libpurple-lang as a component of SUSE Linux Enterprise Software Development Kit 12 pidgin-devel as a component of SUSE Linux Enterprise Software Development Kit 12 pidgin as a component of SUSE Linux Enterprise Software Development Kit 12 finch-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 libpurple as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 libpurple-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 libpurple-lang as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 pidgin-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 pidgin as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 finch as a component of SUSE Linux Enterprise Workstation Extension 12 libpurple as a component of SUSE Linux Enterprise Workstation Extension 12 libpurple-lang as a component of SUSE Linux Enterprise Workstation Extension 12 libpurple-meanwhile as a component of SUSE Linux Enterprise Workstation Extension 12 libpurple-tcl as a component of SUSE Linux Enterprise Workstation Extension 12 pidgin as a component of SUSE Linux Enterprise Workstation Extension 12 finch as a component of SUSE Linux Enterprise Workstation Extension 12 SP1 libpurple as a component of SUSE Linux Enterprise Workstation Extension 12 SP1 libpurple-lang as a component of SUSE Linux Enterprise Workstation Extension 12 SP1 libpurple-meanwhile as a component of SUSE Linux Enterprise Workstation Extension 12 SP1 libpurple-tcl as a component of SUSE Linux Enterprise Workstation Extension 12 SP1 pidgin as a component of SUSE Linux Enterprise Workstation Extension 12 SP1 The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to (1) decrypt hashed passwords by leveraging knowledge of client registration codes or (2) gain login access by eavesdropping on login messages and re-using the hashed passwords. CVE-2016-2379 SUSE Linux Enterprise Desktop 12 SP1:finch SUSE Linux Enterprise Desktop 12 SP1:libpurple SUSE Linux Enterprise Desktop 12 SP1:libpurple-lang SUSE Linux Enterprise Desktop 12 SP1:libpurple-meanwhile SUSE Linux Enterprise Desktop 12 SP1:libpurple-tcl SUSE Linux Enterprise Desktop 12 SP1:pidgin SUSE Linux Enterprise Desktop 12:finch SUSE Linux Enterprise Desktop 12:libpurple SUSE Linux Enterprise Desktop 12:libpurple-lang SUSE Linux Enterprise Desktop 12:libpurple-meanwhile SUSE Linux Enterprise Desktop 12:libpurple-tcl SUSE Linux Enterprise Desktop 12:pidgin SUSE Linux Enterprise Software Development Kit 11 SP4:finch SUSE Linux Enterprise Software Development Kit 11 SP4:finch-devel SUSE Linux Enterprise Software Development Kit 11 SP4:libpurple SUSE Linux Enterprise Software Development Kit 11 SP4:libpurple-devel SUSE Linux Enterprise Software Development Kit 11 SP4:libpurple-lang SUSE Linux Enterprise Software Development Kit 11 SP4:pidgin SUSE Linux Enterprise Software Development Kit 11 SP4:pidgin-devel SUSE Linux Enterprise Software Development Kit 12 SP1:finch-devel SUSE Linux Enterprise Software Development Kit 12 SP1:libpurple SUSE Linux Enterprise Software Development Kit 12 SP1:libpurple-devel SUSE Linux Enterprise Software Development Kit 12 SP1:libpurple-lang SUSE Linux Enterprise Software Development Kit 12 SP1:pidgin SUSE Linux Enterprise Software Development Kit 12 SP1:pidgin-devel SUSE Linux Enterprise Software Development Kit 12:finch-devel SUSE Linux Enterprise Software Development Kit 12:libpurple SUSE Linux Enterprise Software Development Kit 12:libpurple-devel SUSE Linux Enterprise Software Development Kit 12:libpurple-lang SUSE Linux Enterprise Software Development Kit 12:pidgin SUSE Linux Enterprise Software Development Kit 12:pidgin-devel SUSE Linux Enterprise Workstation Extension 12 SP1:finch SUSE Linux Enterprise Workstation Extension 12 SP1:libpurple SUSE Linux Enterprise Workstation Extension 12 SP1:libpurple-lang SUSE Linux Enterprise Workstation Extension 12 SP1:libpurple-meanwhile SUSE Linux Enterprise Workstation Extension 12 SP1:libpurple-tcl SUSE Linux Enterprise Workstation Extension 12 SP1:pidgin SUSE Linux Enterprise Workstation Extension 12:finch SUSE Linux Enterprise Workstation Extension 12:libpurple SUSE Linux Enterprise Workstation Extension 12:libpurple-lang SUSE Linux Enterprise Workstation Extension 12:libpurple-meanwhile SUSE Linux Enterprise Workstation Extension 12:libpurple-tcl SUSE Linux Enterprise Workstation Extension 12:pidgin important 3.3 AV:A/AC:L/Au:N/C:P/I:N/A:N 8.8 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H