CVEvulnerability
CVE-2013-6169
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-10-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-310
Description
The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes it easier for remote attackers to obtain sensitive information via a brute-force attack.
Affected configurations
• process-one ejabberd (<= 2.1.12)
• process-one ejabberd 0.9
• process-one ejabberd 0.9.1
• process-one ejabberd 0.9.8
• process-one ejabberd 1.0.0
• process-one ejabberd 1.1.0
• process-one ejabberd 1.1.1
• process-one ejabberd 1.1.1.0
• process-one ejabberd 1.1.1.1
• process-one ejabberd 1.1.2
• process-one ejabberd 1.1.3
• process-one ejabberd 1.1.14
• process-one ejabberd 2.0.0
• process-one ejabberd 2.0.1 2
• process-one ejabberd 2.0.2
• process-one ejabberd 2.0.3
• process-one ejabberd 2.0.4
• process-one ejabberd 2.0.5
• process-one ejabberd 2.1.0
• process-one ejabberd 2.1.1
• process-one ejabberd 2.1.2
• process-one ejabberd 2.1.3
• process-one ejabberd 2.1.4
• process-one ejabberd 2.1.5
• process-one ejabberd 2.1.6
• process-one ejabberd 2.1.7
• process-one ejabberd 2.1.8
• process-one ejabberd 2.1.9
• process-one ejabberd 2.1.10
• process-one ejabberd 2.1.11
Related
Weakness · not in database (1)
References
- http://www.debian.org/security/2013/dsa-2775 www.debian.org
- https://www.process-one.net/en/ejabberd/release_notes/release_note_ejabberd_2.1.12/ www.process-one.net
- http://www.debian.org/security/2013/dsa-2775 www.debian.org
- https://www.process-one.net/en/ejabberd/release_notes/release_note_ejabberd_2.1.12/ www.process-one.net