1. Home
  2. CVE Database
  3. CVE-2013-1053
MEDIUM · 5.5

CVE-2013-1053

In crypt.c of remote-login-service, the cryptographic algorithm used to cache usernames and passwords is insecure. An attacker could use this vulnerability to recover usernames and passwords from the ...

Vulnerability Description

In crypt.c of remote-login-service, the cryptographic algorithm used to cache usernames and passwords is insecure. An attacker could use this vulnerability to recover usernames and passwords from the file. This issue affects version 1.0.0-0ubuntu3 and prior versions.

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
CanonicalRemote-Login-Service<= 1.0.0-0ubuntu3

Related Weaknesses (CWE)

CWE-261CWE-327

References

FAQ

What is CVE-2013-1053?

CVE-2013-1053 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In crypt.c of remote-login-service, the cryptographic algorithm used to cache usernames and passwords is insecure. An attacker could use this vulnerability to recover usernames and passwords from the ...

How severe is CVE-2013-1053?

CVE-2013-1053 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-1053?

Check the references section above for vendor advisories and patch information. Affected products include: Canonical Remote-Login-Service.