CVE-2006-2185

The CVE-2006-2185 entry concerns PORTAL.NLM in Novell Netware 6.5 SP5. The authenticated component writes the username and password in cleartext to the abend.log file when groupOperationsMethod fails, enabling a context-dependent attacker with access to log contents to gain privileges. The descri...

CVE-2006-2185: Undefined Security Weakness

PORTAL.NLM in Novell Netware 6.5 SP5 writes the username and password in cleartext to the abend.log log file when the groupOperationsMethod function fails, which allows context-dependent attackers to gain privileges...

[Full-disclosure] Novell NDPS Remote Vulnerability (Server & Client)

Summary: There's an integer overflow present that affects Novell Windows clients and Novell Netware server and Novell Open Enterprise server. Impact: Remote, unauthenticated, super-user privileges. Affected software: Novell Netware All versions Novell Open Enterprise Server All NetWare based...

Integer overflow

Multiple integer overflows in the DPRPC library DPRPCNLM.NLM NDPS/iPrint module in Novell Distributed Print Services in Novell NetWare 6.5 SP3, SP4, and SP5 allow remote attackers to execute arbitrary code via an XDR encoded array with a field that specifies a large number of elements, which...

CVE-2006-2327

Multiple integer overflows in the DPRPC library DPRPCNLM.NLM NDPS/iPrint module in Novell Distributed Print Services in Novell NetWare 6.5 SP3, SP4, and SP5 allow remote attackers to execute arbitrary code via an XDR encoded array with a field that specifies a large number of elements, which...

CVE-2006-2327

CVE-2006-2327 describes multiple integer overflows in the DPRPC library (DPRPCNLM.NLM) within the NDPS/iPrint module of Novell Distributed Print Services on NetWare 6.5 SP3/SP4/SP5. An unauthenticated remote attacker could trigger overflows by sending an XDR-encoded array with a very large elemen...

CVE-2006-2327: Undefined Security Weakness

Multiple integer overflows in the DPRPC library DPRPCNLM.NLM NDPS/iPrint module in Novell Distributed Print Services in Novell NetWare 6.5 SP3, SP4, and SP5 allow remote attackers to execute arbitrary code via an XDR encoded array with a field that specifies a large number of elements, which...

CVE-2006-2327

Multiple integer overflows in the DPRPC library DPRPCNLM.NLM NDPS/iPrint module in Novell Distributed Print Services in Novell NetWare 6.5 SP3, SP4, and SP5 allow remote attackers to execute arbitrary code via an XDR encoded array with a field that specifies a large number of elements, which...

Novell Messenger Archive Agent Detection

The remote host is running Novell Messenger Archive Agent, an enterprise instant messaging server for Windows, Linux, and NetWare. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid21241; scriptversion"1.11"; scriptnameenglish:"Novell Messenger Archive Agent Detection";...

Novell Messenger Messaging Agent Detection

The remote host is running Novell Messenger Messaging Agent, an enterprise instant messaging server for Windows, Linux, and NetWare. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid21242; scriptversion"1.12"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Novell...

Design/Logic Flaw

The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server OES sometimes selects a weak cipher instead of an available stronger cipher, which makes it easier for remote attackers to sniff and decrypt an SSL protected session...

Design/Logic Flaw

The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server OES allows a client to force the server to use weak encryption by stating that a weak cipher is required for client compatibility, which might allow remote attackers to decrypt contents of an SSL...

CVE-2006-0999

The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server OES allows a client to force the server to use weak encryption by stating that a weak cipher is required for client compatibility, which might allow remote attackers to decrypt contents of an SSL...

CVE-2006-0998

The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server OES sometimes selects a weak cipher instead of an available stronger cipher, which makes it easier for remote attackers to sniff and decrypt an SSL protected session...

CVE-2006-0997

The CVE-2006-0997 affects the SSL server in NILE.NLM (Novell NetWare 6.5 and Open Enterprise Server). It allows encryption with a NULL key, causing cleartext SSL sessions that can be read by sniffing network traffic. Connected docs confirm the affected component and root cause; no remediation or ...

CVE-2006-0999

CVE-2006-0999 affects the SSL server in Novell NetWare 6.5 and Novell Open Enterprise Server (OES), where NILE.NLM can be coerced to use a weak cipher for compatibility. This could allow an attacker to decrypt content of SSL sessions by forcing weaker encryption. The description does not specify ...

CVE-2006-0997

The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server OES permits encryption with a NULL key, which results in cleartext communication that allows remote attackers to read an SSL protected session by sniffing network traffic...

CVE-2006-0999

The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server OES allows a client to force the server to use weak encryption by stating that a weak cipher is required for client compatibility, which might allow remote attackers to decrypt contents of an SSL...

CVE-2006-0998

The CVE-2006-0998 issue affects Novell NetWare 6.5 and Novell Open Enterprise Server (OES) where the SSL server implementation in NILE.NLM can select a weak cipher instead of an available stronger cipher. This weak cipher choice enables remote attackers to sniff and potentially decrypt SSL sessio...

CVE-2006-0997: Undefined Security Weakness

The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server OES permits encryption with a NULL key, which results in cleartext communication that allows remote attackers to read an SSL protected session by sniffing network traffic...