Description
In crypt.c of remote-login-service, the cryptographic algorithm used to cache usernames and passwords is insecure. An attacker could use this vulnerability to recover usernames and passwords from the file. This issue affects version 1.0.0-0ubuntu3 and prior versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Canonical | remote-login-service | 1.0.0-0 – ≤ 1.0.0-0ubuntu3 | — |
References
- https://launchpad.net/bugs/1158373 vendor-advisory