RHEL 7 : pidgin (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - pidgin: MXIT gsnprintf Multiple Buffer Overflow Vulnerabilities CVE-2016-2368 - pidgin: Eavesdropping...

RHEL 7 : pidgin (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - pidgin: MXIT gsnprintf Multiple Buffer Overflow Vulnerabilities CVE-2016-2368 - pidgin: Eavesdropping...

CVE-2016-2379

The CVE-2016-2379 entry relates to Pidgin’s MXIT support, where passwords are encrypted with weak crypto. The described impact is that an attacker could decrypt hashed passwords by leveraging client registration codes or gain login access by eavesdropping on login messages and re-using the hashed...