CVE-2000-0591

Novell BorderManager 3.0 and 3.5 allows remote attackers to bypass URL filtering by encoding characters in the requested URL...

CVE-2000-0591

CVE-2000-0591 affects Novell BorderManager 3.0 and 3.5. The vulnerability enables remote attackers to bypass URL filtering by encoding characters in the requested URL, allowing policy evasion. The provided documents do not specify the root cause details, affected subcomponents, exploit availabili...

Novell Border Manger - Anyone can pose as an authenticated user

Info: Author: George R. Johnson Date: 07/07/00 Product: BorderManager 3.0 possibly others Vendor: Novell Problem: Unauthenticated user can web surf as any authenticated user Discussion: To provide SSO-like capabilities for customers using BorderManger proxy server and the NetWare client, Novell...

CVE-2000-0651

The ClientTrust program in Novell BorderManager does not properly verify the origin of authentication requests, which could allow remote attackers to impersonate another user by replaying the authentication requests and responses from port 3024 of the victim's machine...

Novell BorderManager 3.0 EE - Encoded URL rule bypass

I suspect that this has already been defined, but I cannot find any reference to it. Setting secure areas on an intranet secured by URL rules within bordermanager can be bypassed by changing some of the characters in the URL with -encoded triplets. To access http://home.myintranet.com/secure use...

CVE-2000-0591

Novell BorderManager 3.0 and 3.5 allows remote attackers to bypass URL filtering by encoding characters in the requested URL...

CVE-2000-0152

Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000...

CVE-2000-0152

Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000...

CVE-2000-0152

CVE-2000-0152 concerns remote denial of service in Novell BorderManager 3.5 . According to the sources, a user can trigger a DoS by pressing the enter key over a telnet session to port 2000 . The NVD entry confirms the vulnerability exists and notes the impact as a partial loss of availability wi...

bordermanager-dos.txt

The issue also affects BorderManager 3.0 sp2 running on NetWare 4.11 sp6a. I was able to replicate the memory allocation error but have not had any luck with obtaining the high CPU utilisation. Again, csatpxy.nlm is loaded by default on this system and unloading it stopped the memory allocation...

Novell BorderManager Port 2000 Telnet DoS

The port 2000 is open, and Novell BorderManager might be listening on it. There is a denial of service attack that allows an intruder to make a Novell BorderManager 3.5 slowly die. If you see an error message on this computer telling you 'Short Term Memory Allocator is out of Memory' then you are...

Novell BorderManager 3.03.5 Audit Trail Proxy - Denial of Service

Novell BorderManager 3.03.5 Audit Trail Proxy - Denial of Service source: https://www.securityfocus.com/bid/976/info A feature called the CS Audit Trail Proxy is installed by default with BorederManager 3.0 and 3.5 .This feature opens a listening port at port 2000, on both the internal and extern...

Novell BorderManager 3.0/3.5 Audit Trail Proxy - Denial of Service

source: https://www.securityfocus.com/bid/976/info A feature called the CS Audit Trail Proxy is installed by default with BorederManager 3.0 and 3.5 .This feature opens a listening port at port 2000, on both the internal and external interfaces. If a connection is made to this port and the 'enter...