Vulnerabilities > CVE-2006-0998 - Multiple vulnerability in Novell Netware and Open Enterprise Server

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
novell
NVD
Published: 2006-03-23
Updated: 2020-02-24

Summary

The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) sometimes selects a weak cipher instead of an available stronger cipher, which makes it easier for remote attackers to sniff and decrypt an SSL protected session.

Vulnerable Configurations

Part Description Count
OS
Novell
8

References