Novell Open Enterprise Server 1.x

CPE Details

Novell Open Enterprise Server 1.x
novell
open_enterprise_server
1.x
2020-02-24
13h15 +00:00
2020-02-24
13h15 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:o:novell:open_enterprise_server:1.x:*:*:*:*:*:*:*

Informations

Vendor

novell

Product

open_enterprise_server

Version

1.x

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2013-2770 2013-04-07 17h00 +00:00 The installation functionality in the Novell Kanaka component before 2.8 for Novell Open Enterprise Server (OES) on Mac OS X does not verify the server's X.509 certificate during an SSL session, which allows man-in-the-middle attackers to spoof servers via an arbitrary certificate.
5.8
CVE-2009-0611 2009-02-17 16h00 +00:00 Multiple cross-site scripting (XSS) vulnerabilities in qfsearch/AdminServlet in QuickFinder Server in Novell Open Enterprise Server 1.x allow remote attackers to inject arbitrary web script or HTML via (1) the siteloc parameter in a displayaddsite action, the site parameter in a (2) generalproperties or (3) clusterserviceproperties action, (4) the adminurl parameter in a global action, or (5) the print-list parameter.
4.3
CVE-2006-0997 2006-03-23 10h00 +00:00 The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) permits encryption with a NULL key, which results in cleartext communication that allows remote attackers to read an SSL protected session by sniffing network traffic.
5
CVE-2006-0998 2006-03-23 10h00 +00:00 The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) sometimes selects a weak cipher instead of an available stronger cipher, which makes it easier for remote attackers to sniff and decrypt an SSL protected session.
5
CVE-2006-0999 2006-03-23 10h00 +00:00 The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) allows a client to force the server to use weak encryption by stating that a weak cipher is required for client compatibility, which might allow remote attackers to decrypt contents of an SSL protected session.
5