Alteon 2424 Application Switch
Approved changes feed: RSS · Atom
cpe:2.3:h:nortel:alteon_2424_application_switch:23.2:*:*:*:*:*:*:*
part: h version: 23.2 update: *
| Vendor | Nortel (2aa82da8-c221-56dc-9473-4af705a7acff) |
|---|---|
| Product | Alteon 2424 Application Switch (b641f696-1ff0-5dc3-bc76-146a84cbe925) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2007-1057 |
not_vulnerable | 2026-06-08 04:49:34.127229 |
Details available
The Net Direct client for Linux before 6.0.5 in Nortel Application Switch 2424, VPN 3050 and 3070, and SSL VPN Module 1000 extracts and executes files with insecure permissions, which allows local users to exploit a race condition to replace a world-writable file in /tmp/NetClient and cause another user to execute arbitrary code when attempting to execute this client, as demonstrated by replacing /tmp/NetClient/client.
Published: 2007-02-21T23:00:00.000Z
Updated: 2024-08-07T12:43:22.572Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.