ejabberd: SSLv2 and weak cipher use
| Package(s): | ejabberd | CVE #(s): | |
| Created: | October 11, 2013 | Updated: | October 16, 2013 |
| Description: | From the Debian advisory: It was discovered that ejabberd, a Jabber/XMPP server, uses SSLv2 and weak ciphers for communication, which are considered insecure. The software offers no runtime configuration options to disable these. This update disables the use of SSLv2 and weak ciphers. | ||
| Alerts: | (No alerts in the database for this vulnerability) | ||