Vulnerabilities > CVE-2006-0999 - Multiple vulnerability in Novell Netware and Open Enterprise Server

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
novell
NVD
Published: 2006-03-23
Updated: 2020-02-24

Summary

The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) allows a client to force the server to use weak encryption by stating that a weak cipher is required for client compatibility, which might allow remote attackers to decrypt contents of an SSL protected session.

Vulnerable Configurations

Part Description Count
OS
Novell
8

References