CVE-2016-2379

The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to (1) decrypt hashed passwords by leveraging knowledge of client registration codes or (2) gain login access by eavesdropping on login messages and re-using the hashed passwords.

• CWE-326

• http://www.securityfocus.com/bid/91335Third Party Advisory, VDB Entry
• http://www.talosintelligence.com/reports/TALOS-2016-0122/Third Party Advisory
• https://pidgin.im/news/security/?id=95Vendor Advisory
• https://security.gentoo.org/glsa/201701-38Third Party Advisory
• http://www.securityfocus.com/bid/91335Third Party Advisory, VDB Entry
• http://www.talosintelligence.com/reports/TALOS-2016-0122/Third Party Advisory
• https://pidgin.im/news/security/?id=95Vendor Advisory
• https://security.gentoo.org/glsa/201701-38Third Party Advisory

Published

Mar 29, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-2373A denial of service vulnerability exists in the handling of …
• CVE-2016-2374An exploitable memory corruption vulnerability exists in the…
• CVE-2016-2375An exploitable out-of-bounds read exists in the handling of …
• CVE-2016-2376A buffer overflow vulnerability exists in the handling of th…
• CVE-2016-2377A buffer overflow vulnerability exists in the handling of th…
• CVE-2016-2378A buffer overflow vulnerability exists in the handling of th…
• CVE-2016-2380An information leak exists in the handling of the MXIT proto…
• CVE-2016-2381Perl might allow context-dependent attackers to bypass the t…7.5
• CVE-2016-2383The adjust_branches function in kernel/bpf/verifier.c in the…5.5
• CVE-2016-2384Double free vulnerability in the snd_usbmidi_create function…
• CVE-2016-2385Heap-based buffer overflow in the encode_msg function in enc…
• CVE-2016-2386SQL injection vulnerability in the UDDI server in SAP NetWea…9.8