Описание
The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) permits encryption with a NULL key, which results in cleartext communication that allows remote attackers to read an SSL protected session by sniffing network traffic.
The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) permits encryption with a NULL key, which results in cleartext communication that allows remote attackers to read an SSL protected session by sniffing network traffic.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2006-0997
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25380
- http://secunia.com/advisories/19324
- http://securitytracker.com/id?1015799
- http://support.novell.com/cgi-bin/search/searchtid.cgi?10100633.htm
- http://www.osvdb.org/24046
- http://www.securityfocus.com/bid/17176
- http://www.vupen.com/english/advisories/2006/1043
EPSS
CVE ID
Связанные уязвимости
The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) permits encryption with a NULL key, which results in cleartext communication that allows remote attackers to read an SSL protected session by sniffing network traffic.
EPSS