Description
Nortel Networks Contivity VPN Client displays a different error message depending on whether the username is valid or invalid, which could allow remote attackers to gain sensitive information.
References
- 11623 vdb-entry
- VU#830214 third-party-advisory
- http://www.nii.co.in/vuln/contivity.html
- http://www.kb.cert.org/vuls/id/CRDY-626N7F
- 20041110 Nortel Networks Contivity VPN Client information leakage vulnerability mailing-list
- nortel-contivity-info-disclosure(17988) vdb-entry