CVE-2005-2579

Nortel Contivity VPN Client V05_01.030, when configuring a certificate to be used as authentication, does not properly drop system privileges, which allows local users to gain privileges by opening a program with the File Open dialog box.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2005-08-16

Last modified

2024-08-07

Affected products

• Contivity (Nortel)

References

• http://marc.info/?l=bugtraq&m=112370730131219&w=2