In crypt.c of remote-login-service, the cryptographic algorithm used to cache usernames and passwords is insecure. An attacker could use this vulnerability to recover usernames and passwords from the file. This issue affects version 1.0.0-0ubuntu3 and prior versions.
Advisory | Patch | Confirmed | Link |
---|---|---|---|
https://launchpad.net/bugs/1158373 |