CVE-2013-1053

In crypt.c of remote-login-service, the cryptographic algorithm used to cache usernames and passwords is insecure. An attacker could use this vulnerability to recover usernames and passwords from the file. This issue affects version 1.0.0-0ubuntu3 and prior versions.

• CWE-261
• CWE-327

• https://launchpad.net/bugs/1158373Third Party Advisory
• https://launchpad.net/bugs/1158373Third Party Advisory

Published

Jan 13, 2021

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-1047WebKit, as used in Apple iOS before 7, allows remote attacke…
• CVE-2013-1048The Debian apache2ctl script in the apache2 package squeeze …
• CVE-2013-1049Buffer overflow in the RFC1413 (ident) client in cfingerd 1.…
• CVE-2013-1050The default configuration in gnome-screensaver 3.5.4 through…
• CVE-2013-1051apt 0.8.16, 0.9.7, and possibly other versions does not prop…
• CVE-2013-1052pam-xdg-support, as used in Ubuntu 12.10, does not properly …
• CVE-2013-1054The unity-firefox-extension package could be tricked into de…6.5
• CVE-2013-1055The unity-firefox-extension package could be tricked into dr…4.3
• CVE-2013-1056X.org X server 1.13.3 and earlier, when not run as root, all…
• CVE-2013-1057Untrusted search path vulnerability in maas-import-pxe-files…
• CVE-2013-1058maas-import-pxe-files in MAAS before 13.10 does not verify t…
• CVE-2013-1059net/ceph/auth_none.c in the Linux kernel through 3.10 allows…