CVE-2007-1057: nortel net_direct_client
Vulnerability summary
CVE-2007-1057 is a medium (CVSS 6.9) vulnerability in nortel net_direct_client. EPSS estimates a 1.11% chance of exploitation in the next 30 days, higher than 65.4% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 21-02-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The Net Direct client for Linux before 6.0.5 in Nortel Application Switch 2424, VPN 3050 and 3070, and SSL VPN Module 1000 extracts and executes files with insecure permissions, which allows local users to exploit a race condition to replace a world-writable file in /tmp/NetClient and cause another user to execute arbitrary code when attempting to execute this client, as demonstrated by replacing /tmp/NetClient/client.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.11%
Chance of exploitation in the next 30 days
Percentile
65%
Versus all other CVEs
30-day change
+0.01 pp
From 1.11% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundNortel SSL VPN Linux Client 6.0.3 - Local Privilege Escalation
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Nortel1 product
- net_direct_client≤ 6.0.4
1 vendor · 1 product