Xrdp
CVE-2013-1430
CRITICAL
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionCVE.org
An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file ~/.vnc/sesman_${username}_passwd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key.
AnalysisAI
An issue was discovered in xrdp before 0.9.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Technical ContextAI
This vulnerability is classified under CWE-255. An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file ~/.vnc/sesman_${username}_passwd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key. Affected products include: Neutrinolabs Xrdp, Debian Debian Linux. Version information: before 0.9.1..
RemediationAI
A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
xrdp is an open source RDP server. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no au
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
xrdp open-source RDP server before v0.10.5 has an unauthenticated stack buffer overflow enabling remote code execution.
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
Same weakness CWE-255 – Credentials Management Errors
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today