PT-2000-1585 · Novell · Novell Bordermanager

Published 2000-07-07 · Updated 2017-10-10 · CVE-2000-0651

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Novell BorderManager (affected versions not specified)

Description The issue concerns the ClientTrust program in Novell BorderManager, which fails to properly verify the origin of authentication requests. This could allow remote attackers to impersonate another user by replaying the authentication requests and responses from port 3024 of the victim's machine.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2000-0651

Affected Products

Novell Bordermanager

References · 4

• 🔥 http://securityfocus.com/bid/1440 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0651 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5186 · Note
• http://securityfocus.com/templates/archive.pike?list=1&msg=06256915.00591E18.00%40uprrsmtp2.notes.up.com · Note