Home > Vulnerability Database > CVE-2013-6169

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2013-6169

Good to know:

Date: October 3, 2022

The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes it easier for remote attackers to obtain sensitive information via a brute-force attack.

Language: C

Severity Score

5.5

Related Resources (6)

Url: https://nvd.nist.gov/vuln/detail/CVE-2013-6169

Url: http://www.debian.org/security/2013/dsa-2775

Url: https://www.process-one.net/en/ejabberd/release_notes/release_note_ejabberd_2.1.12/

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2013-6169

Url: https://security-tracker.debian.org/tracker/CVE-2013-6169

Url: https://www.mend.io/vulnerability-database/CVE-2013-6169

Severity Score

5.5

Weakness Type (CWE)

Cryptographic Issues

CWE-310

Top Fix

Upgrade Version

Upgrade to version 2.1.12

CVSS v3

Base Score:	5.5
Attack Vector (AV):
Attack Complexity (AC):
Privileges Required (PR):
User Interaction (UI):
Scope (S):
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	NONE

CVSS v2

Base Score:	5.3
Access Vector (AV):
Access Complexity (AC):
Authentication (AU):
Confidentiality (C):	LOW
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

Do you need more information?

Contact Us