CVE-2006-0997 in NetWare
Summary
The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) permits encryption with a NULL key, which results in cleartext communication that allows remote attackers to read an SSL protected session by sniffing network traffic.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
03/06/2006
Disclosure
03/23/2006
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 2100 | Novell NetWare Encryption NILE.NLM | Proof-of-Concept | Official fix | CVE-2006-0997 |