CVE-2006-0999

Published: Mar 23, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) allows a client to force the server to use weak encryption by stating that a weak cipher is required for client compatibility, which might allow remote attackers to decrypt contents of an SSL protected session.

Affected (8)

Products: Novell: Open Enterprise Server, Netware

2 products

Open Enterprise Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Novell Open Enterprise Server	All versions

Configuration B

7 vulnerable

Vulnerable Software	Affected Versions
Novell Netware	Version 6.5
Novell Netware	Version 6.5 sp1.1a
Novell Netware	Version 6.5 sp1.1b
Novell Netware	Version 6.5 sp1
Novell Netware	Version 6.5 sp2
Novell Netware	Version 6.5 sp3
Novell Netware	Version 6.5 sp4

References (18)

http://secunia.com/advisories/19324

Source: cve@mitre.org

http://securitytracker.com/id?1015799

Source: cve@mitre.org

http://support.novell.com/cgi-bin/search/searchtid.cgi?10100633.htm

Source: cve@mitre.org

http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html

Source: cve@mitre.org

http://www.osvdb.org/24048

Source: cve@mitre.org

http://www.securityfocus.com/bid/17176

Source: cve@mitre.org

http://www.securityfocus.com/bid/64758

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1043

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25382

Source: cve@mitre.org

http://secunia.com/advisories/19324

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015799

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.novell.com/cgi-bin/search/searchtid.cgi?10100633.htm

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/24048

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/17176

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/64758

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/1043

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/25382

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.