CVE-2007-2334 - Vulnerability Details - OpenCVE

Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 has two template HTML files lacking certain verification tags, which allows remote attackers to access the administration interface and change the device configuration via certain requests.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Nortel	Contivity Vpn Router 5000

Configuration 1 [-]

OR	cpe:2.3:h:nortel:contivity:1000_vpn_switch:::::::*
	cpe:2.3:h:nortel:contivity:2000_vpn_switch:::::::*
	cpe:2.3:h:nortel:contivity:4000_vpn_switch:::::::*
	cpe:2.3:h:nortel:vpn_router_5000::::::::

No data.

References

Link	Providers
http://osvdb.org/35056
http://secunia.com/advisories/24962
http://www.securityfocus.com/bid/23562
http://www.securitytracker.com/id?1017943
http://www.vupen.com/english/advisories/2007/1464
http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=567877&RenditionID=&poid=null

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-04-27T16:00:00

Updated: 2024-08-07T13:33:28.631Z

Reserved: 2007-04-27T00:00:00

Link: CVE-2007-2334

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2007-04-27T16:19:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2007-2334

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-04-18T00:00:00", "descriptions": [{"lang": "en", "value": "Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 has two template HTML files lacking certain verification tags, which allows remote attackers to access the administration interface and change the device configuration via certain requests."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2008-11-13T10:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "1017943", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1017943"}, {"name": "23562", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/23562"}, {"name": "24962", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24962"}, {"name": "35056", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/35056"}, {"name": "ADV-2007-1464", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/1464"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=567877&RenditionID=&poid=null"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-2334", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 has two template HTML files lacking certain verification tags, which allows remote attackers to access the administration interface and change the device configuration via certain requests."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "1017943", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1017943"}, {"name": "23562", "refsource": "BID", "url": "http://www.securityfocus.com/bid/23562"}, {"name": "24962", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24962"}, {"name": "35056", "refsource": "OSVDB", "url": "http://osvdb.org/35056"}, {"name": "ADV-2007-1464", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/1464"}, {"name": "http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=567877&RenditionID=&poid=null", "refsource": "CONFIRM", "url": "http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=567877&RenditionID=&poid=null"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T13:33:28.631Z"}, "title": "CVE Program Container", "references": [{"name": "1017943", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1017943"}, {"name": "23562", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/23562"}, {"name": "24962", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/24962"}, {"name": "35056", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/35056"}, {"name": "ADV-2007-1464", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/1464"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=567877&RenditionID=&poid=null"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-2334", "datePublished": "2007-04-27T16:00:00", "dateReserved": "2007-04-27T00:00:00", "dateUpdated": "2024-08-07T13:33:28.631Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:nortel:contivity:1000_vpn_switch:*:*:*:*:*:*:*", "matchCriteriaId": "4342FEF4-588B-459B-9490-3FD89B229E64", "vulnerable": true}, {"criteria": "cpe:2.3:h:nortel:contivity:2000_vpn_switch:*:*:*:*:*:*:*", "matchCriteriaId": "F31FDFE3-82C9-47CA-A5FF-E5A2491794FE", "vulnerable": true}, {"criteria": "cpe:2.3:h:nortel:contivity:4000_vpn_switch:*:*:*:*:*:*:*", "matchCriteriaId": "BDC7887D-9D8C-46D8-9065-23D41CF07E88", "vulnerable": true}, {"criteria": "cpe:2.3:h:nortel:vpn_router_5000:*:*:*:*:*:*:*:*", "matchCriteriaId": "9050DFE2-99C6-41F0-AD1D-5EDFB9B15D8C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 has two template HTML files lacking certain verification tags, which allows remote attackers to access the administration interface and change the device configuration via certain requests."}, {"lang": "es", "value": "Nortel VPN Router (tambi\u00e9n conocido como Contivity) 1000, 2000, 4000, y 5000 anterior a 5_05.149, 5_05.3xx anterior 5_05.304, y 6.x anterior 6_05.140 tiene dos archivos de plantilla html que carecen de ciertas etiquetas de verificaci\u00f3n, lo cual podr\u00eda permitir a atacantes remotos acceder a la interfaz de administrador y cambiar los controladores de configuraci\u00f3n a trav\u00e9s de ciertas respuestas."}], "evaluatorSolution": "The vendor has addressed this issue with the following product update: http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=567877&RenditionID=&poid=null", "id": "CVE-2007-2334", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-04-27T16:19:00.000", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/35056"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/24962"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/23562"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.securitytracker.com/id?1017943"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/1464"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=567877&RenditionID=&poid=null"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/35056"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/24962"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/23562"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.securitytracker.com/id?1017943"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2007/1464"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=567877&RenditionID=&poid=null"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}