FKIE_CVE-2006-0998

Vulnerability from fkie_nvd - Published: 2006-03-23 11:06 - Updated: 2026-06-16 22:21
Severity
Summary
The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) sometimes selects a weak cipher instead of an available stronger cipher, which makes it easier for remote attackers to sniff and decrypt an SSL protected session.
References
cve@mitre.orghttp://secunia.com/advisories/19324
cve@mitre.orghttp://securitytracker.com/id?1015799
cve@mitre.orghttp://support.novell.com/cgi-bin/search/searchtid.cgi?10100633.htm
cve@mitre.orghttp://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
cve@mitre.orghttp://www.osvdb.org/24047
cve@mitre.orghttp://www.securityfocus.com/bid/17176
cve@mitre.orghttp://www.securityfocus.com/bid/64758
cve@mitre.orghttp://www.vupen.com/english/advisories/2006/1043
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/25381
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/19324
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1015799
af854a3a-2127-422b-91ae-364da2661108http://support.novell.com/cgi-bin/search/searchtid.cgi?10100633.htm
af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/24047
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/17176
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/64758
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/1043
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/25381
Impacted products
Vendor Product Version
novell open_enterprise_server *
novell netware 6.5
novell netware 6.5
novell netware 6.5
novell netware 6.5
novell netware 6.5
novell netware 6.5
novell netware 6.5
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:novell:open_enterprise_server:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C1DA33CB-1F9D-4042-BD23-1E41A6079511",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:novell:netware:6.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "D328A81E-DC60-4B67-B707-F0AD9A6F48E2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:novell:netware:6.5:sp1:*:*:*:*:*:*",
              "matchCriteriaId": "1CEB9CEA-9245-490F-88F6-EFD23B11A19B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:novell:netware:6.5:sp1.1a:*:*:*:*:*:*",
              "matchCriteriaId": "0669D0E2-AB83-44AE-A87C-C7EB7AA2953A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:novell:netware:6.5:sp1.1b:*:*:*:*:*:*",
              "matchCriteriaId": "062E2A9A-CF88-4844-B5A1-7418722087D9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:novell:netware:6.5:sp2:*:*:*:*:*:*",
              "matchCriteriaId": "0F8E031C-CE1F-410F-8F32-B3E33719C498",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:novell:netware:6.5:sp3:*:*:*:*:*:*",
              "matchCriteriaId": "87F80FDC-7851-4EA8-BC7D-87B85C6BB93C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:novell:netware:6.5:sp4:*:*:*:*:*:*",
              "matchCriteriaId": "8C3AB68F-1D78-4217-9C56-B1B25F62FF38",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) sometimes selects a weak cipher instead of an available stronger cipher, which makes it easier for remote attackers to sniff and decrypt an SSL protected session."
    },
    {
      "lang": "es",
      "value": "La implementaci\u00f3n del servidor SSL en NILE.NLM en Novell NetWare 6.5 y Novell Open Enterprise Server (OES) a veces selecciona un cifrado d\u00e9bil en lugar de un cifrado m\u00e1s fuerte disponible, lo que facilita a atacantes remotos rastrear y descifrar una sesi\u00f3n SSL protegida."
    }
  ],
  "id": "CVE-2006-0998",
  "lastModified": "2026-06-16T22:21:49.203",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.0,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-03-23T11:06:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/19324"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1015799"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://support.novell.com/cgi-bin/search/searchtid.cgi?10100633.htm"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/24047"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/17176"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/64758"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2006/1043"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25381"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19324"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1015799"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://support.novell.com/cgi-bin/search/searchtid.cgi?10100633.htm"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/24047"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/17176"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/64758"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/1043"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25381"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.