CVE

Id
67329  
CVE No.
CVE-2013-7382  
Status
Candidate  
Description
VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier has a hardcoded password of donotedit for the (1) VDAD and (2) VDCL users, which makes it easier for remote attackers to obtain access.  
Phase
Assigned (20140517)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
649465 67329 CVE-2013-7382 EXPLOIT-DB:29513  View
649466 67329 CVE-2013-7382 URL:http://www.exploit-db.com/exploits/29513  View
649467 67329 CVE-2013-7382 MLIST:[oss-security] 20131023 VICIDIAL 2.7 - SQL Injection, Command Injection  View
649468 67329 CVE-2013-7382 URL:http://www.openwall.com/lists/oss-security/2013/10/23/10  View
649469 67329 CVE-2013-7382 MLIST:[oss-security] 20131024 Re: VICIDIAL 2.7 - SQL Injection, Command Injection  View
649470 67329 CVE-2013-7382 URL:http://www.openwall.com/lists/oss-security/2013/10/25/1  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
24975 JVNDB-2013-006550 DataLife Engine における Web セッションをハイジャックされる脆弱性 DataLife Engine (DLE) には、Web セッションをハイジャックされる脆弱性が存在します。 CVE-2013-7387 67329 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006550.html  View