PT-2005-3469 · Nortel · Nortel Contivity Vpn Client

Jeff Peadro · Published 2005-08-16 · Updated 2016-10-18 · CVE-2005-2579

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Nortel Contivity VPN Client version V05 01.030

Description The issue arises when configuring a certificate for authentication, where the system fails to properly drop privileges. This allows local users to elevate their privileges by exploiting the File Open dialog box in a program.

Recommendations For Nortel Contivity VPN Client version V05 01.030, consider restricting access to the certificate configuration feature until a proper fix is applied to ensure the system correctly handles privileges. As a temporary workaround, avoid using the File Open dialog box for certificate configuration to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-2579

Affected Products

Nortel Contivity Vpn Client

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2005-2579 · Security Note
• http://marc.info/?l=bugtraq&m=112370730131219&w=2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2579 · Note