CVE-2007-2334

CVE-2007-2334

EPSS 1.6%

Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 has two template HTML files lacking certain verification tags, which allows remote attackers to access the administration interface and change the device configuration via certain requests.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://osvdb.org/35056 http://secunia.com/advisories/24962 http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=567877&RenditionID=&poid=null http://www.securityfocus.com/bid/23562 http://www.securitytracker.com/id?1017943 http://www.vupen.com/english/advisories/2007/1464