CVE-2007-2332: Critical severity Nortel Vpn Router 1700 vulnerability
Published Apr 27, 2007
·Updated
Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 605.140 uses a fixed DES key to encrypt passwords, which allows remote authenticated users to obtain a password via a brute force attack on a hash from the LDAP store.
Affected Software
8 affected components
Nortel Vpn Router 1700
Nortel Vpn Router 5000
Nortel Vpn Router 1100
Nortel Vpn Router 1010
Nortel Vpn Router 1050
Nortel Vpn Router 1750
Nortel Vpn Router 2700
Nortel Vpn Router 1740
Event History
Apr 27, 2007
CVE Published
04:19 PM
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-2332?
CVE-2007-2332 is classified as a medium severity vulnerability.
2
How do I fix CVE-2007-2332?
To fix CVE-2007-2332, upgrade the affected Nortel VPN Router firmware to version 6_05.140 or later.
3
What are the affected products of CVE-2007-2332?
CVE-2007-2332 affects several Nortel VPN Routers including models 1000, 2000, 4000, and 5000.
4
What type of vulnerability is CVE-2007-2332?
CVE-2007-2332 is a cryptographic vulnerability due to the use of a fixed DES key for password encryption.
5
Can CVE-2007-2332 be exploited remotely?
Yes, CVE-2007-2332 can be exploited remotely by authenticated users who can perform a brute force attack.