CVE-2007-1057

CVE-2007-1057 describes a local privilege escalation vulnerability in the Net Direct client for Linux, affecting Nortel Application Switch 2424, VPN 3050/3070, and SSL VPN Module 1000 versions prior to 6.0.5. The client insecurely extracts and executes files, allowing a local attacker to exploit a race condition by replacing a world-writable file in /tmp/NetClient. This can lead to another user executing arbitrary code when attempting to launch the client. The vulnerability has a CVSS score of 6.9, indicating high severity due to complete confidentiality, integrity, and availability impacts (C:C/I:C/A:C) with a local attack vector (AV:L) and medium attack complexity (AC:M). While not listed on the KEV catalog or Hot List, exploit code is publicly available via ExploitDB. There is no evidence of active exploitation, and it has received minimal community discussion or media coverage.