CVE-2009-4655

CVE-2009-4655 affects Novell eDirectory 8.8.5 DHOST web service, which uses a predictable session cookie that can enable session hijacking by a remote attacker. The PacketStorm/MSF and Nessus/OpenVAS entries corroborate a cookie-based hijack vector tied to DHost. Evidence notes the vulnerability ...

[SA22699] Novell BorderManager ISAKMP Predictable Cookie Security Issue

TITLE: Novell BorderManager ISAKMP Predictable Cookie Security Issue SECUNIA ADVISORY ID: SA22699 VERIFY ADVISORY: http://secunia.com/advisories/22699/ CRITICAL: Less critical IMPACT: Security Bypass, DoS WHERE: From remote SOFTWARE: Novell BorderManager 3.x http://secunia.com/product/378/...

Novell BorderManager ISAKMP weak cryptography

Predictable cookie generation allows DoS and replay attacks...