CVE-2006-7155
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
92.8%
Novell BorderManager 3.8 SP4 generates the same ISAKMP cookies for the same source IP and port number during the same day, which allows remote attackers to conduct denial of service and replay attacks. NOTE: this issue might be related to CVE-2006-5286.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| novell | bordermanager | 3.8 | cpe:2.3:a:novell:bordermanager:3.8:sp4:*:*:*:*:*:* |
References
secunia.com/advisories/22699
securitytracker.com/id?1017213
www.attrition.org/pipermail/vim/2007-March/001410.html
www.osvdb.org/30338
www.securityfocus.com/bid/21014
www.vupen.com/english/advisories/2006/4471
exchange.xforce.ibmcloud.com/vulnerabilities/30218
secure-support.novell.com/KanisaPlatform/Publishing/201/3003139_f.SAL_Public.html
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
92.8%