CVE-2005-2579 Information

Description

Nortel Contivity VPN Client V05_01.030 when configuring a certificate to be used as authentication does not properly drop system privileges which allows local users to gain privileges by opening a program with the File Open dialog box.

Reference

http://marc.info/?l=bugtraq&m=112370730131219&w=2