Vulnerability in Nortel Contivity
CVE-2005-2579
Nortel Contivity VPN Client V05_01.030, when configuring a certificate to be used as authentication, does not properly drop system privileges, which allows local users to gain privileges by opening a program with the File Open dialog box.
EPSS: 0.003 (21.4th percentile) — read the EPSS interpretation.
Affected products
- Nortel Contivity — versions v05_01.030
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)