Home  >  CVE-2004-1105
CVE Details for CVE: CVE-2004-1105
Summary
Nortel Networks Contivity VPN Client displays a different error message depending on whether the username is valid or invalid, which could allow remote attackers to gain sensitive information.
Timestamps
Last major update 11-07-2017 - 01:30
Published 10-01-2005 - 05:00
Last modified 11-07-2017 - 01:30
References
Vulnerable Configurations
  • cpe:2.3:h:nortel:contivity:4.91:*:*:*:*:*:*:*
    cpe:2.3:h:nortel:contivity:4.91:*:*:*:*:*:*:*
CAPEC
Click the CAPEC title to display a description
CWE
NVD-CWE-Other
CVSS
Base
5.0
Impact
2.9
Exploitability
10.0
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
CVSS3
None
VIA4 references
cvss-vector via4
AV:N/AC:L/Au:N/C:P/I:N/A:N
refmap via4
bid 11623
cert-vn VU#830214
confirm http://www.kb.cert.org/vuls/id/CRDY-626N7F
fulldisc 20041110 Nortel Networks Contivity VPN Client information leakage vulnerability
misc http://www.nii.co.in/vuln/contivity.html
xf nortel-contivity-info-disclosure(17988)