CVE-2005-2579: Nortel Contivity

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

Nortel Contivity VPN Client V05_01.030, when configuring a certificate to be used as authentication, does not properly drop system privileges, which allows local users to gain privileges by opening a program with the File Open dialog box.

Affected products

• Nortel Contivity: version v05_01.030 only

Published 2005-08-16. Last modified 2026-06-16.