PT-2005-3469 · Nortel · Nortel Contivity Vpn Client

Jeff Peadro · Publicado 2005-08-16 · Atualizado 2016-10-18 · CVE-2005-2579

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Nortel Contivity VPN Client version V05 01.030

Description The issue arises when configuring a certificate for authentication, where the system fails to properly drop privileges. This allows local users to elevate their privileges by exploiting the File Open dialog box in a program.

Recommendations For Nortel Contivity VPN Client version V05 01.030, consider restricting access to the certificate configuration feature until a proper fix is applied to ensure the system correctly handles privileges. As a temporary workaround, avoid using the File Open dialog box for certificate configuration to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-2579

Produtos afetados

Nortel Contivity Vpn Client

Referências · 3

• http://marc.info/?l=bugtraq&m=112370730131219&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2579 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2579 · Nota