CVE-2013-6838 | BDVDB-2026-59640 Detail

Description#

An unspecified Enghouse Interactive Professional Services "addon product" in Enghouse Interactive IVR Pro (VIP2000) 9.0.3 (rel903), when using OpenVZ and fallback customization, uses the same SSH private key across different customers' installations, which allows remote attackers to gain privileges by leveraging knowledge of this key.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://xpd.se/advisories/XPD-2013-001.txt
http://seclists.org/fulldisclosure/2014/Jan/103

Exploit#

No public exploit known

History#

Version 12014-01-28Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.