CVE-2005-0844: Medium severity Nortel Contivity vulnerability
Published Mar 24, 2005
·Updated
Nortel VPN client 5.01 stores the cleartext password in the memory of the Extranet.exe process, which could allow local users to obtain sensitive information.
Affected Software
1 affected component
Nortel Contivity=5.01
Event History
Mar 24, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0844?
The severity of CVE-2005-0844 is considered to be medium as it allows local users to access sensitive information.
2
How do I fix CVE-2005-0844?
To fix CVE-2005-0844, users should upgrade to a newer version of the Nortel VPN client that does not store passwords in cleartext.
3
Which versions are affected by CVE-2005-0844?
CVE-2005-0844 specifically affects Nortel VPN client version 5.01.
4
What type of vulnerability is CVE-2005-0844?
CVE-2005-0844 is a local information disclosure vulnerability.
5
Who is affected by CVE-2005-0844?
Local users on systems running the affected version of the Nortel VPN client are at risk due to CVE-2005-0844.