Unscored severity · published Mar 7, 2007
CVE-2006-7155
Novell BorderManager 3.8 SP4 generates the same ISAKMP cookies for the same source IP and port number during the same day, which allows remote attackers to conduct denial of…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Novell BorderManager 3.8 SP4 generates the same ISAKMP cookies for the same source IP and port number during the same day, which allows remote attackers to conduct denial of service and replay attacks. NOTE: this issue might be related to CVE-2006-5286.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BO
Bordermanager · Novell
3.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-7155
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-7155
Patch
http://secunia.com/advisories/22699
securitytracker.com
http://securitytracker.com/id?1017213
www.attrition.org
http://www.attrition.org/pipermail/vim/2007-March/001410.html
Vendor Advisory
http://www.osvdb.org/30338
www.securityfocus.com
http://www.securityfocus.com/bid/21014
www.vupen.com
http://www.vupen.com/english/advisories/2006/4471
More from Bordermanager
–
CVE-2007-5767
Heap-based buffer overflow in the Client Trust application (clntrust.exe) in Novell BorderManager 3.8 before Update 1.5 allows remote attackers to execute arbitrary code via a…
–
CVE-2006-5286
Unspecified vulnerability in IKE.NLM in Novell BorderManager 3.8 allows attackers to cause a denial of service (crash) via unknown attack vectors related to "VPN issues" for…
–
CVE-2006-1218
Unspecified vulnerability in the HTTP proxy in Novell BorderManager 3.8 and earlier allows remote attackers to cause a denial of service (CPU consumption and ABEND) via unknown…
–
CVE-2004-1457
The Virtual Private Network (VPN) capability in Novell Bordermanager 3.8 allows remote attackers to cause a denial of service (ABEND in IKE.NLM) via a malformed IKE packet, as…
–
CVE-2002-0781
RTSP proxy for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a GET request to port 9090 followed by a series of carriage returns, which…