$ cve CVE-2007-1057 JSON

CVE-2007-1057 EXPLOIT

6.9

MEDIUM · CVSS 2.0 · EPSS 1.1% (pctl 65)

Patch early

A public exploit exists.

Description

The Net Direct client for Linux before 6.0.5 in Nortel Application Switch 2424, VPN 3050 and 3070, and SSL VPN Module 1000 extracts and executes files with insecure permissions, which allows local users to exploit a race condition to replace a world-writable file in /tmp/NetClient and cause another user to execute arbitrary code when attempting to execute this client, as demonstrated by replacing /tmp/NetClient/client.

Scoring

CVSS	6.9 (MEDIUM, v2.0)
Vector	AV:L/AC:M/Au:N/C:C/I:C/A:C
EPSS	1.11% — more likely to be exploited than 65% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2007-02-21
Last modified	2026-06-16

Affected (4)

Vendor	Product
nortel	alteon 2424 application switch
nortel	net direct client
nortel	ssl vpn module 1000
nortel	vpn gateway 3070

Public exploits

Source	Title	Date
exploit-db	Nortel SSL VPN Linux Client 6.0.3 - Local Privilege Escalation	2007-02-21

References

→ the Explorer · watch your stack · NVD