CVE-2007-1057 - CVE House
Back to Database
Status published Medium CVE-2007-1057

The Net Direct client for Linux before 6.0.5 in Nortel...

Vulnerability Description

The Net Direct client for Linux before 6.0.5 in Nortel Application Switch 2424, VPN 3050 and 3070, and SSL VPN Module 1000 extracts and executes files with insecure permissions, which allows local users to exploit a race condition to replace a world-writable file in /tmp/NetClient and cause another user to execute arbitrary code when attempting to execute this client, as demonstrated by replacing /tmp/NetClient/client.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-1057

Credits & Attribution

No credits recorded in the NVD database.

References

More from nortel

View All →
CVE-2008-6579
Nortel Communication Server 1000 4.50.x allows remote attackers to obtain...
Medium 5
CVE-2008-6578
Multiple unspecified vulnerabilities in Nortel Communication Server 1000 4.50.x allow...
Critical 10
CVE-2008-6577
Nortel MG1000S, Signaling Server, and Call Server on the Communications...
Critical 10
CVE-2008-6576
Unspecified vulnerability in the "session limitation technique" in the FTP...
High 7.8
CVE-2008-6564
Nortel UNIStim protocol, as used in Communication Server 1000 and...
High 7.6

Affected Vendor

Affected Software

net direct client
Vulnerable Versions:
0

Timeline

Official Publish: February 21st, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.