CVE-2004-1105 in Contivity VPN Client

Summary

Nortel Networks Contivity VPN Client displays a different error message depending on whether the username is valid or invalid, which could allow remote attackers to gain sensitive information.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 11/30/2004
• Disclosure: 01/10/2005
• Moderation: VulDB entry created
• Entries: VDB-976 (1)
• CPE: ready
• CWE: CWE-200 (Confirmed)
• CVSS: 3.7
• EPSS: 0.03769
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-1105
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-1105
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-1105/