Approved changes feed: RSS · Atom
cpe:2.3:h:nortel:contivity:4.91:*:*:*:*:*:*:*
part: h version: 4.91 update: *
| Vendor | Nortel (2aa82da8-c221-56dc-9473-4af705a7acff) |
|---|---|
| Product | Contivity (86ec3a16-826e-5f76-9450-533b96e52c7f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2004-2621 |
vulnerable | 2026-06-08 04:48:10.353902 |
Details available
Nortel Contivity VPN Client 2.1.7, 3.00, 3.01, 4.91, and 5.01, when opening a VPN tunnel, does not check the gateway certificate until after a dialog box has been displayed to the user, which creates a race condition that allows remote attackers to perform a man-in-the-middle (MITM) attack.
Published: 2005-12-04T22:00:00.000Z
Updated: 2024-08-08T01:36:24.561Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1105 |
vulnerable | 2026-06-08 04:47:52.964885 |
Details available
Nortel Networks Contivity VPN Client displays a different error message depending on whether the username is valid or invalid, which could allow remote attackers to gain sensitive information.
Published: 2004-12-01T05:00:00.000Z
Updated: 2024-08-08T00:39:01.036Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.