Vulnerability Details CVE-2007-2332
Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 6_05.140 uses a fixed DES key to encrypt passwords, which allows remote authenticated users to obtain a password via a brute force attack on a hash from the LDAP store.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.5%
CVSS Severity
CVSS v2 Score 9.0
References
- http://secunia.com/advisories/24962
- http://www.securityfocus.com/bid/23562
- http://www.vupen.com/english/advisories/2007/1464
- http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=567877&RenditionID=&poid=null
- http://secunia.com/advisories/24962
- http://www.securityfocus.com/bid/23562
- http://www.vupen.com/english/advisories/2007/1464
- http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=567877&RenditionID=&poid=null
Products affected by CVE-2007-2332
-
cpe:2.3:h:nortel:vpn_router_1010:-
-
cpe:2.3:h:nortel:vpn_router_1050:-
-
cpe:2.3:h:nortel:vpn_router_1100:-
-
cpe:2.3:h:nortel:vpn_router_1700:-
-
cpe:2.3:h:nortel:vpn_router_1740:-
-
cpe:2.3:h:nortel:vpn_router_1750:-
-
cpe:2.3:h:nortel:vpn_router_2700:-
-
cpe:2.3:h:nortel:vpn_router_5000:-