In crypt.c of remote-login-service, the cryptographic algorithm used to cache usernames and passwords is insecure. An attacker could use this vulnerability to recover usernames and passwords from the file. This issue affects version 1.0.0-0ubuntu3 and prior versions.
Weakness
Obscuring a password with a trivial encoding does not protect the password.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Remote-login-service | Canonical | * | 1.0.0-0ubuntu3 (including) |
| Remote-login-service | Ubuntu | quantal | * |
| Remote-login-service | Ubuntu | raring | * |
| Remote-login-service | Ubuntu | saucy | * |
| Remote-login-service | Ubuntu | trusty | * |
| Remote-login-service | Ubuntu | utopic | * |