CVE-2007-2334

CVE-2007-2334

EPSS 1.6%

Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 has two template HTML files lacking certain verification tags, which allows remote attackers to access the administration interface and change the device configuration via certain requests.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://osvdb.org/35056 http://secunia.com/advisories/24962 http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=567877&RenditionID=&poid=null http://www.securityfocus.com/bid/23562 http://www.securitytracker.com/id?1017943 http://www.vupen.com/english/advisories/2007/1464