CVE-2007-2334

Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 has two template HTML files lacking certain verification tags, which allows remote attackers to access the administration interface and change the device configuration via certain requests.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2007-04-27

Last modified

2024-08-07

Affected products

• Contivity (Nortel)
• Vpn Router 5000 (Nortel)

References

• http://osvdb.org/35056
• http://secunia.com/advisories/24962
• http://www.securityfocus.com/bid/23562
• http://www.securitytracker.com/id?1017943
• http://www.vupen.com/english/advisories/2007/1464
• http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=567877&RenditionID=&poid=null