PT-2000-1585 · Novell · Novell Bordermanager

Publicado 2000-07-07 · Atualizado 2017-10-10 · CVE-2000-0651

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Novell BorderManager (affected versions not specified)

Description The issue concerns the ClientTrust program in Novell BorderManager, which fails to properly verify the origin of authentication requests. This could allow remote attackers to impersonate another user by replaying the authentication requests and responses from port 3024 of the victim's machine.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2000-0651

Produtos afetados

Novell Bordermanager

Referências · 4

• 🔥 http://securityfocus.com/bid/1440 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5186 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0651 · Nota de Segurança
• http://securityfocus.com/templates/archive.pike?list=1&msg=06256915.00591E18.00%40uprrsmtp2.notes.up.com · Nota