Description
The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) sometimes selects a weak cipher instead of an available stronger cipher, which makes it easier for remote attackers to sniff and decrypt an SSL protected session.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.vupen.com/english/advisories/2006/1043 ↗
- http://securitytracker.com/id?1015799 ↗
- http://www.osvdb.org/24047 ↗
- http://support.novell.com/cgi-bin/search/searchtid.cgi?10100633.htm ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25381 ↗
- http://secunia.com/advisories/19324 ↗
- http://www.securityfocus.com/bid/64758 ↗
- http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html ↗
- http://www.securityfocus.com/bid/17176 ↗