VUL-1: libircclient: insecure openssl cipher suite

Brought to you by: gyunaev

#26 VUL-1: libircclient: insecure openssl cipher suite

Milestone: latest_stable_version

Status: open

Owner: nobody

Labels: None

Priority: 2

Updated: 2016-06-13

Created: 2016-06-13

Private: No

libircclient uses a specific cipher suite (codestream File: libircclient-1.*/src/ssl.c)

cipher suite used:

ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH

results:

RC4 and PSK are offered as encryption algorithm