Vulnerability in Novell Bordermanager
CVE-2006-7155
Novell BorderManager 3.8 SP4 generates the same ISAKMP cookies for the same source IP and port number during the same day, which allows remote attackers to conduct denial of service and replay attacks. NOTE: this issue might be related to CVE-2006-5286.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 7.5 (High). Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.017 (76.9th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 77th percentile — 76.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.017 · newest: 0.017 · change: 0.000
Affected products
- Novell Bordermanager — versions 3.8
References
- www.attrition.org/pipermail/vim/2007-March/001410.html (mailing-list)
- exchange.xforce.ibmcloud.com/vulnerabilities/30218 (vdb-entry)
- www.securityfocus.com/bid/21014 (vdb-entry)
- secunia.com/advisories/22699 (Patch, Vendor Advisory, third-party-advisory)
- secure-support.novell.com/KanisaPlatform/Publishing/201/3003139_f.SAL_Public.ht…
- www.osvdb.org/30338 (vdb-entry, Vendor Advisory)
- www.vupen.com/english/advisories/2006/4471 (vdb-entry)
- securitytracker.com/id (vdb-entry)