CVE-2004-1105: Nortel Contivity

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

Nortel Networks Contivity VPN Client displays a different error message depending on whether the username is valid or invalid, which could allow remote attackers to gain sensitive information.

Affected products

• Nortel Contivity: version 4.91 only

Published 2005-01-10. Last modified 2026-06-16.