Approved changes feed: RSS · Atom
cpe:2.3:h:nortel:contivity:5.01:*:*:*:*:*:*:*
part: h version: 5.01 update: *
| Vendor | Nortel (2aa82da8-c221-56dc-9473-4af705a7acff) |
|---|---|
| Product | Contivity (86ec3a16-826e-5f76-9450-533b96e52c7f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2005-0844 |
vulnerable | 2026-06-08 04:48:13.831071 |
Details available
Nortel VPN client 5.01 stores the cleartext password in the memory of the Extranet.exe process, which could allow local users to obtain sensitive information.
Published: 2005-03-24T05:00:00.000Z
Updated: 2024-08-07T21:28:28.583Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-2621 |
vulnerable | 2026-06-08 04:48:10.354557 |
Details available
Nortel Contivity VPN Client 2.1.7, 3.00, 3.01, 4.91, and 5.01, when opening a VPN tunnel, does not check the gateway certificate until after a dialog box has been displayed to the user, which creates a race condition that allows remote attackers to perform a man-in-the-middle (MITM) attack.
Published: 2005-12-04T22:00:00.000Z
Updated: 2024-08-08T01:36:24.561Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.