CVEvulnerability
CVE-2005-2579
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-08-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Nortel Contivity VPN Client V05_01.030, when configuring a certificate to be used as authentication, does not properly drop system privileges, which allows local users to gain privileges by opening a program with the File Open dialog box.
Affected configurations
• nortel contivity v05 01.030