CVE-2004-2621 - Nortel Contivity VPN Client 2.1.7, 3.00, 3.01, 4.91, and 5.01, when opening a VPN tunnel, does not c

CVE-2004-2621

Summary

Nortel Contivity VPN Client 2.1.7, 3.00, 3.01, 4.91, and 5.01, when opening a VPN tunnel, does not check the gateway certificate until after a dialog box has been displayed to the user, which creates a race condition that allows remote attackers to perform a man-in-the-middle (MITM) attack.

References

Vulnerable Configurations

cpe:2.3:h:nortel:contivity:2.1.7:*:*:*:*:*:*:*
cpe:2.3:h:nortel:contivity:2.1.7:*:*:*:*:*:*:*
cpe:2.3:h:nortel:contivity:3.00:*:*:*:*:*:*:*
cpe:2.3:h:nortel:contivity:3.00:*:*:*:*:*:*:*
cpe:2.3:h:nortel:contivity:3.01:*:*:*:*:*:*:*
cpe:2.3:h:nortel:contivity:3.01:*:*:*:*:*:*:*
cpe:2.3:h:nortel:contivity:4.91:*:*:*:*:*:*:*
cpe:2.3:h:nortel:contivity:4.91:*:*:*:*:*:*:*
cpe:2.3:h:nortel:contivity:5.01:*:*:*:*:*:*:*
cpe:2.3:h:nortel:contivity:5.01:*:*:*:*:*:*:*

CVSS

Base:	4.0 (as of 20-07-2017 - 01:29)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	HIGH	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	NONE

cvss-vector via4

AV:N/AC:H/Au:N/C:P/I:P/A:N

refmap via4

bid	11495
confirm	http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?level=6&category=8&subcategory=6&subtype=&DocumentOID=276620&RenditionID=REND159588
osvdb	11002
sectrack	1011846
secunia	12881
xf	nortel-contivity-gain-access(17812)

Last major update

20-07-2017 - 01:29

Published

31-12-2004 - 05:00

Last modified

20-07-2017 - 01:29