The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to (1) decrypt hashed passwords by leveraging knowledge of client registration codes or (2) gain login access by eavesdropping on login messages and re-using the hashed passwords.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - pidgin: Out-of-bounds write in purple_markup_unescape_entity triggered by invalid XML (CVE-2017-2640)

  - Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive     information via a dbus session monitor. (CVE-2012-1257)

  - The (1) bundled GnuTLS SSL/TLS plugin and the (2) bundled OpenSSL SSL/TLS plugin in libpurple in Pidgin     before 2.10.10 do not properly consider the Basic Constraints extension during verification of X.509     certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain     sensitive information via a crafted certificate. (CVE-2014-3694)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - pidgin: MXIT g_snprintf Multiple Buffer Overflow Vulnerabilities (CVE-2016-2368)

  - pidgin: Eavesdropping hashed password when logging (CVE-2016-2379)

  - libgadu before 1.11.4 and 1.12.0 before 1.12.0-rc3, as used in Pidgin and other products, allows remote     Gadu-Gadu file relay servers to cause a denial of service (memory overwrite) or possibly execute arbitrary     code via a crafted message. (CVE-2014-3775)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - pidgin: Out-of-bounds write in purple_markup_unescape_entity triggered by invalid XML (CVE-2017-2640)

  - cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in process     memory, which might allow local users to obtain sensitive information by reading a core file or other     representation of memory contents. (CVE-2011-4922)

  - Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive     information via a dbus session monitor. (CVE-2012-1257)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The remote host is affected by the vulnerability described in GLSA-201701-38 (Pidgin: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Pidgin. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker might send specially crafted data using the MXit       protocol, possibly resulting in the remote execution of arbitrary code       with the privileges of the process, a Denial of Service condition, or in       leaking confidential information.
  Workaround :

    There is no known workaround at this time.

The version of Pidgin installed on the remote Windows host is prior to 2.11.0. It is, therefore, affected by multiple vulnerabilities :

  - A NULL pointer dereference flaw exists when handling the     MXIT protocol. A remote attacker can exploit this, via     crafted MXIT data, to cause a denial of service.
    (CVE-2016-2365)

  - Multiple out-of-bounds read errors exist when handling     the MXIT protocol. A remote attacker can exploit these,     via crafted MXIT data, to cause a denial of service.
    (CVE-2016-2366, CVE-2016-2370)

  - An out-of-bounds read error exists when handling the     MXIT protocol. A remote attacker can exploit this, via     an invalid size for an avatar, to disclose memory     contents or cause a denial of service. (CVE-2016-2367)

  - Multiple memory corruption issues exist when handling     the MXIT protocol. A remote attacker can exploit these,     via crafted MXIT data, to disclose memory contents or     execute arbitrary code. (CVE-2016-2368)

  - A NULL pointer dereference flaw exists when handling the     MXIT protocol. A remote attacker can exploit this, via     crafted MXIT packet starting with a NULL byte, to cause     a denial of service. (CVE-2016-2369)

  - An out-of-bounds write error exists when handling the     MXIT protocol. A remote attacker can exploit this, via     crafted MXIT data, to corrupt memory, resulting in the     execution of arbitrary code. (CVE-2016-2371)

  - An out-of-bounds read error exists when handling the     MXIT protocol. A remote attacker can exploit this, via     an invalid size for a file transfer, to disclose memory     contents or cause a denial of service. (CVE-2016-2372)

  - An out-of-bounds read error exists when handling the     MXIT protocol. A remote attacker can exploit this, by     sending an invalid mood, to cause a denial of service.
    (CVE-2016-2373)

  - An out-of-bounds write error exists when handling the     MXIT protocol. A remote attacker can exploit this, via     crafted MXIT MultiMX messages, to disclose memory     contents or execute arbitrary code. (CVE-2016-2374)

  - An out-of-bounds read error exists when handling the     MXIT protocol. A remote attacker can exploit this, via     crafted MXIT contact information, to disclose memory     contents. (CVE-2016-2375)

  - A buffer overflow condition exists when handling the     MXIT protocol. A remote attacker can exploit this, via     a crafted packet having an invalid size, to execute     arbitrary code. (CVE-2016-2376)

  - An out-of-bounds write error exists when handling the     MXIT protocol. A remote attacker can exploit this, via     a negative content-length response to an HTTP request,     to cause a denial of service. (CVE-2016-2377)

  - A buffer overflow condition exists when handling the     MXIT protocol. A remote attacker can exploit this, via     crafted data using negative length values, to cause a     denial of service. (CVE-2016-2378)

  - A flaw exists in MXIT due to using weak cryptography     when encrypting a user password. A man-in-the-middle     attacker able to access login messages can exploit this     to impersonate the user. (CVE-2016-2379)

  - An out-of-bounds read error exists when handling the     MXIT protocol. A remote attacker can exploit this, via     a crafted local message, to disclose memory contents.
    (CVE-2016-2380)

  - A directory traversal flaw exists when handling the     MXIT protocol. A remote attacker can exploit this, via     crafted MXIT data using an invalid file name for a     splash image, to overwrite files. (CVE-2016-4323)

  - An unspecified vulnerability exists due to X.509     certificates not being properly imported when using     GnuTLS. No other details are available.

ID	Name	Product	Family	Severity
199367	RHEL 6 : pidgin (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
199333	RHEL 7 : pidgin (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
199298	RHEL 5 : pidgin (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
196315	RHEL 6 : pidgin (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
196274	RHEL 7 : pidgin (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
196266	RHEL 5 : pidgin (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
96542	GLSA-201701-38 : Pidgin: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
91784	Pidgin < 2.11.0 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2016-2379

high

Tenable Plugins

critical

high

critical

critical

high

critical

critical

high