PT-2017-16373 · Netiq · Edirectory+1

Published 2017-04-27 · Updated 2019-10-03 · CVE-2017-5186

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Novell iManager versions 2.7 before SP7 Patch 9 NetIQ iManager versions 3.x before 3.0.2.1 Novell eDirectory versions 8.8.x before 8.8 SP8 Patch 9 Hotfix 2 NetIQ eDirectory versions 9.x before 9.0.2.2

Description The issue concerns the use of the deprecated MD5 hashing algorithm in a communications certificate.

Recommendations For Novell iManager versions 2.7 before SP7 Patch 9, update to SP7 Patch 9 or later. For NetIQ iManager versions 3.x before 3.0.2.1, update to 3.0.2.1 or later. For Novell eDirectory versions 8.8.x before 8.8 SP8 Patch 9 Hotfix 2, update to 8.8 SP8 Patch 9 Hotfix 2 or later. For NetIQ eDirectory versions 9.x before 9.0.2.2, update to 9.0.2.2 or later.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2017-5186

Affected Products

Edirectory

Imanager

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2017-5186 · Security Note
• https://osv.dev/vulnerability/CVE-2017-5186 · Vendor Advisory
• https://bugzilla.novell.com/show_bug.cgi?id=988749 · Note
• https://novell.com/support/kb/doc.php?id=7016795 · Note
• https://novell.com/support/kb/doc.php?id=7010166 · Note
• https://bugzilla.novell.com/show_bug.cgi?id=1019789 · Note
• https://novell.com/support/kb/doc.php?id=7016794 · Note
• https://novell.com/support/kb/doc.php?id=3426981 · Note
• https://bugzilla.novell.com/show_bug.cgi?id=1019041 · Note