The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) allows a client to force the server to use weak encryption by stating that a weak cipher is required for client compatibility, which might allow remote attackers to decrypt contents of an SSL protected session.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Information
Published : 2006-03-23 03:06
Updated : 2020-02-24 06:15
NVD link : CVE-2006-0999
Mitre link : CVE-2006-0999
JSON object : View
CWE
Products Affected
novell
- netware
- open_enterprise_server