CVE-2013-1053

In crypt.c of remote-login-service, the cryptographic algorithm used to cache usernames and passwords is insecure. An attacker could use this vulnerability to recover usernames and passwords from the file. This issue affects version 1.0.0-0ubuntu3 and prior versions.

Score

CVSS 3.1 5.5 Medium

Status

Modified - security@ubuntu.com

Published

2021-01-13

Last modified

2024-09-16

Weaknesses

CWE-261, CWE-327

Affected products

• Remote-login-service (Canonical)

References

• https://launchpad.net/bugs/1158373