Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2007-1057 Details

Description

The Net Direct client for Linux before 6.0.5 in Nortel Application Switch 2424, VPN 3050 and 3070, and SSL VPN Module 1000 extracts and executes files with insecure permissions, which allows local users to exploit a race condition to replace a world-writable file in /tmp/NetClient and cause another user to execute arbitrary code when attempting to execute this client, as demonstrated by replacing /tmp/NetClient/client.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://osvdb.org/33304	CVE
http://secunia.com/advisories/24231	CVE	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/32597	CVE
http://spoofed.org/blog/archive/2007/02/nortel_vpn_unix_client_local_root_compromise.html	CVE
https://www.exploit-db.com/exploits/3356	CVE
http://www116.nortelnetworks.com/pub/repository/CLARIFY/DOCUMENT/2007/08/021886-01.pdf	CVE
http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=540071	CVE	Patch
http://www.securityfocus.com/bid/22632	CVE
http://www.securitytracker.com/id?1017678	CVE
http://www.vupen.com/english/advisories/2007/0671	CVE
http://osvdb.org/33304	[email protected]
http://secunia.com/advisories/24231	[email protected]	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/32597	[email protected]
http://spoofed.org/blog/archive/2007/02/nortel_vpn_unix_client_local_root_compromise.html	[email protected]
https://www.exploit-db.com/exploits/3356	[email protected]
http://www116.nortelnetworks.com/pub/repository/CLARIFY/DOCUMENT/2007/08/021886-01.pdf	[email protected]
http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=540071	[email protected]	Patch
http://www.securityfocus.com/bid/22632	[email protected]
http://www.securitytracker.com/id?1017678	[email protected]
http://www.vupen.com/english/advisories/2007/0671	[email protected]

see all 20 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-Other	Weakness Not in a Standard CWE Category	[email protected]

Affected Products

Product	Versions
nortel alteon 2424 application switch	23.2
CPE cpe:2.3:h:nortel:alteon_2424_application_switch:23.2:::::::* Remediation No remediation found in references.
nortel ssl vpn module 1000	All versions
CPE cpe:2.3:h:nortel:ssl_vpn_module_1000:::::::: Remediation No remediation found in references.
nortel vpn gateway 3070	All versions
CPE cpe:2.3:h:nortel:vpn_gateway_3070:::::::: Remediation No remediation found in references.
nortel net direct client	<= 6.0.4
CPE cpe:2.3:a:nortel:net_direct_client:::linux:::::* Remediation No remediation found in references.

Change History

7 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 23, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Oct 11, 2017	CVE Modified	[email protected]
Jul 29, 2017	CVE Modified	[email protected]
Feb 22, 2007	Initial Analysis	[email protected]

CVE-2007-1057 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO