Unscored severity · published Mar 23, 2006
CVE-2006-0998
The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) sometimes selects a weak cipher instead of an available stronger cipher,…
–
CVSS
3.2%
EPSS
No
On KEV
Description
The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) sometimes selects a weak cipher instead of an available stronger cipher, which makes it easier for remote attackers to sniff and decrypt an SSL protected session.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.2% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Netware · Novell
6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +1 more · source: NVD
OE
Open Enterprise Server · Novell
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-0998
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-0998
secunia.com
http://secunia.com/advisories/19324
securitytracker.com
http://securitytracker.com/id?1015799
support.novell.com
http://support.novell.com/cgi-bin/search/searchtid.cgi?10100633.htm
www.oracle.com
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
www.osvdb.org
http://www.osvdb.org/24047
www.securityfocus.com
http://www.securityfocus.com/bid/17176
More from Netware
4.0
CVE-1999-0524
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts
–
CVE-2011-4191
Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attackers to execute arbitrary code or cause a denial of service…
–
CVE-2010-4228
Stack-based buffer overflow in NWFTPD.NLM before 5.10.02 in the FTP server in Novell NetWare allows remote authenticated users to execute arbitrary code or cause a denial of…
–
CVE-2010-4227
The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of service (abend) or execute arbitrary code via a crafted,…
–
CVE-2010-2351
Stack-based buffer overflow in the CIFS.NLM driver in Netware SMB 1.0 for Novell Netware 6.5 SP8 and earlier allows remote attackers to execute arbitrary code via a Sessions Setup…