NVD

Id
41717  
Name
CVE-2013-6838  
Description
An unspecified Enghouse Interactive Professional Services "addon product" in Enghouse Interactive IVR Pro (VIP2000) 9.0.3 (rel903), when using OpenVZ and fallback customization, uses the same SSH private key across different customers" installations, which allows remote attackers to gain privileges by leveraging knowledge of this key.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2014-01-27  
Modified Date
2014-01-31  
Seq
2013-6838  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
210872 41717 CVE-2013-6838 20140114 [CVE-2013-6838] Enghouse Interactive IVR Pro (VIP2000) remote root authentication bypass Vulnerability  View
210873 41717 CVE-2013-6838 https://xpd.se/advisories/XPD-2013-001.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24366 JVNDB-2013-005941 Enghouse Interactive IVR Pro の Enghouse Interactive Professional Services の不特定の "アドオン製品" における権限を取得される脆弱性 Enghouse Interactive IVR Pro (VIP2000) の Enghouse Interactive Professional Services の不特定の "アドオン製品" は、OpenVZ および フォールバックのカスタマイズを使用している場合、異なる顧客のインストール間で同じ SSH 秘密鍵を使用するため、権限を取得される脆弱性が存在します。 CVE-2013-6838 66780 CVE-2013-6838 41717 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005941.html 2013-11-27 2014-01-29 View