Details of VAR-200508-0106

ID

VAR-200508-0106

CVE

CVE-2005-2579

TITLE

Nortel Contivity VPN Client Privilege escalation vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200508-142

DESCRIPTION

Nortel Contivity VPN Client V05_01.030, when configuring a certificate to be used as authentication, does not properly drop system privileges, which allows local users to gain privileges by opening a program with the File Open dialog box. Contivity is prone to a local security vulnerability

Trust: 1.26

sources: NVD: CVE-2005-2579 // BID: 89398 // VULHUB: VHN-13788

AFFECTED PRODUCTS

vendor:	nortel	model:	contivity	scope:	eq	version:	v05_01.030	Trust: 1.6
vendor:	apache2triad	model:	contivity	scope:	eq	version:	v0501.030	Trust: 0.3

sources: BID: 89398 // CNNVD: CNNVD-200508-142 // NVD: CVE-2005-2579

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2005-2579
value:	HIGH
Trust: 1.0
CNNVD:	CNNVD-200508-142
value:	HIGH
Trust: 0.6
VULHUB:	VHN-13788
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2005-2579
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
VULHUB:	VHN-13788
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-13788 // CNNVD: CNNVD-200508-142 // NVD: CVE-2005-2579

PROBLEMTYPE DATA

problemtype:

NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2005-2579

THREAT TYPE

local

Trust: 0.9

sources: BID: 89398 // CNNVD: CNNVD-200508-142

TYPE

unknown

Trust: 0.6

sources: CNNVD: CNNVD-200508-142

EXTERNAL IDS

db:	NVD	id:	CVE-2005-2579	Trust: 2.0
db:	BUGTRAQ	id:	20050810 PRIVILEGE ESCALATION IN NORTEL CONTIVITY VPN CLIENT V05_01.030	Trust: 0.6
db:	CNNVD	id:	CNNVD-200508-142	Trust: 0.6
db:	BID	id:	89398	Trust: 0.4
db:	VULHUB	id:	VHN-13788	Trust: 0.1

sources: VULHUB: VHN-13788 // BID: 89398 // CNNVD: CNNVD-200508-142 // NVD: CVE-2005-2579

REFERENCES

url:	http://marc.info/?l=bugtraq&m=112370730131219&w=2	Trust: 1.0
url:	http://marc.theaimsgroup.com/?l=bugtraq&m=112370730131219&w=2	Trust: 0.9
url:	http://marc.info/?l=bugtraq&m=112370730131219&w=2	Trust: 0.1

sources: VULHUB: VHN-13788 // BID: 89398 // CNNVD: CNNVD-200508-142 // NVD: CVE-2005-2579

CREDITS

Unknown

Trust: 0.3

sources: BID: 89398

SOURCES

db:	VULHUB	id:	VHN-13788
db:	BID	id:	89398
db:	CNNVD	id:	CNNVD-200508-142
db:	NVD	id:	CVE-2005-2579

LAST UPDATE DATE

2024-08-14T15:25:40.159000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-13788	date:	2016-10-18T00:00:00
db:	BID	id:	89398	date:	2005-08-16T00:00:00
db:	CNNVD	id:	CNNVD-200508-142	date:	2006-08-30T00:00:00
db:	NVD	id:	CVE-2005-2579	date:	2016-10-18T03:28:45.097

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-13788	date:	2005-08-16T00:00:00
db:	BID	id:	89398	date:	2005-08-16T00:00:00
db:	CNNVD	id:	CNNVD-200508-142	date:	2005-08-16T00:00:00
db:	NVD	id:	CVE-2005-2579	date:	2005-08-16T04:00:00