SuSE 10 Security Update : Novell GroupWise client (ZYPP Patch Number 4494)

This update fixes a security vulnerability in the GroupWise system that allows a malicious user to intercept authentication credentials through a 'man in the middle' attack. CVE-2007-5195 / CVE-2007-5196 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

CVE-2007-5195

Unspecified vulnerability in the SSL implementation in Groupwise client system in the novell-groupwise-client package in SUSE Linux Enterprise Desktop 10 allows remote attackers to obtain credentials via a man-in-the-middle attack, a different vulnerability than CVE-2007-5196...

CVE-2007-5196

CVE-2007-5196 affects SUSE Linux Enterprise Desktop 10 via the GroupWise client (novell-groupwise-client). The vulnerability lies in the SSL implementation and can allow remote attackers to obtain credentials through a man-in-the-middle attack. The issue is addressed by a SUSE security update (ZY...