CVE-2007-2333 - Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.3

CVE-2007-2333

Summary

Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 includes the FIPSecryptedtest1219 and FIPSunecryptedtest1219 default accounts in the LDAP template, which might allow remote attackers to access the private network. The vendor has addressed this issue through a product update that can be found at: http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=567877&RenditionID=&poid=null

References

Vulnerable Configurations

cpe:2.3:h:nortel:contivity:1000_vpn_switch:*:*:*:*:*:*:*
cpe:2.3:h:nortel:contivity:1000_vpn_switch:*:*:*:*:*:*:*
cpe:2.3:h:nortel:contivity:2000_vpn_switch:*:*:*:*:*:*:*
cpe:2.3:h:nortel:contivity:2000_vpn_switch:*:*:*:*:*:*:*
cpe:2.3:h:nortel:contivity:4000_vpn_switch:*:*:*:*:*:*:*
cpe:2.3:h:nortel:contivity:4000_vpn_switch:*:*:*:*:*:*:*
cpe:2.3:h:nortel:vpn_router_5000:*:*:*:*:*:*:*:*
cpe:2.3:h:nortel:vpn_router_5000:*:*:*:*:*:*:*:*
cpe:2.3:h:nortel:vpn_router_portfolio:*:*:*:*:*:*:*:*
cpe:2.3:h:nortel:vpn_router_portfolio:*:*:*:*:*:*:*:*

CVSS

Base:	10.0 (as of 08-03-2011 - 02:54)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bid	23562
confirm	http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=567877&RenditionID=&poid=null
osvdb	35055
sectrack	1017943
secunia	24962
vupen	ADV-2007-1464

Last major update

08-03-2011 - 02:54

Published

27-04-2007 - 16:19

Last modified

08-03-2011 - 02:54