Lucene search

MitreCVE-2005-2579

HistoryAug 16, 2005 - 4:00 a.m.

CVE-2005-2579

2005-08-1604:00:00

mitre

web.nvd.nist.gov

nortel

contivity

vpn

client

privilege escalation

certificate

configuration

vulnerability

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

Low

EPSS

Percentile

5.1%

JSON

Nortel Contivity VPN Client V05_01.030, when configuring a certificate to be used as authentication, does not properly drop system privileges, which allows local users to gain privileges by opening a program with the File Open dialog box.

Affected configurations

Nvd

Node

nortelcontivityMatchv05_01.030

VendorProductVersionCPE
nortelcontivityv05_01.030cpe:2.3:h:nortel:contivity:v05_01.030:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
nortel	contivity	v05_01.030	cpe:2.3:h:nortel:contivity:v05_01.030:::::::*

References

marc.info/?l=bugtraq&m=112370730131219&w=2

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2005-2579