CVE-2007-2332 Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 6_05.140 uses a fixed DES key to encrypt passwords, which allows remote authenticated users to obtain a password via a brute force a...
HighCVSS 9.0
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 6_05.140 uses a fixed DES key to encrypt passwords, which allows remote authenticated users to obtain a password via a brute force attack on a hash from the LDAP store.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nortel vpn router 1010 | All versions | No fix listed |
| nortel vpn router 1050 | All versions | No fix listed |
| nortel vpn router 1100 | All versions | No fix listed |
| nortel vpn router 1700 | All versions | No fix listed |
| nortel vpn router 1740 | All versions | No fix listed |
| nortel vpn router 1750 | All versions | No fix listed |
| nortel vpn router 2700 | All versions | No fix listed |
| nortel vpn router 5000 | All versions | No fix listed |
References
- 24962 third-party-advisory vendor-advisory
- 23562 vdb-entry
- ADV-2007-1464 vdb-entry
- www130.nortelnetworks.com