{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-11-10T00:00:00", "descriptions": [{"lang": "en", "value": "Novell BorderManager 3.8 SP4 generates the same ISAKMP cookies for the same source IP and port number during the same day, which allows remote attackers to conduct denial of service and replay attacks. NOTE: this issue might be related to CVE-2006-5286."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "20070303 Novell BorderManager ISAKMP issue smells like a dupe", "tags": ["mailing-list", "x_refsource_VIM"], "url": "http://www.attrition.org/pipermail/vim/2007-March/001410.html"}, {"name": "novell-bordermanager-isakmp-security-bypass(30218)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30218"}, {"name": "21014", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/21014"}, {"name": "22699", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/22699"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://secure-support.novell.com/KanisaPlatform/Publishing/201/3003139_f.SAL_Public.html"}, {"name": "30338", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/30338"}, {"name": "ADV-2006-4471", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/4471"}, {"name": "1017213", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1017213"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2006-7155", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Novell BorderManager 3.8 SP4 generates the same ISAKMP cookies for the same source IP and port number during the same day, which allows remote attackers to conduct denial of service and replay attacks. NOTE: this issue might be related to CVE-2006-5286."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20070303 Novell BorderManager ISAKMP issue smells like a dupe", "refsource": "VIM", "url": "http://www.attrition.org/pipermail/vim/2007-March/001410.html"}, {"name": "novell-bordermanager-isakmp-security-bypass(30218)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30218"}, {"name": "21014", "refsource": "BID", "url": "http://www.securityfocus.com/bid/21014"}, {"name": "22699", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/22699"}, {"name": "https://secure-support.novell.com/KanisaPlatform/Publishing/201/3003139_f.SAL_Public.html", "refsource": "CONFIRM", "url": "https://secure-support.novell.com/KanisaPlatform/Publishing/201/3003139_f.SAL_Public.html"}, {"name": "30338", "refsource": "OSVDB", "url": "http://www.osvdb.org/30338"}, {"name": "ADV-2006-4471", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/4471"}, {"name": "1017213", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1017213"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T20:57:39.284Z"}, "title": "CVE Program Container", "references": [{"name": "20070303 Novell BorderManager ISAKMP issue smells like a dupe", "tags": ["mailing-list", "x_refsource_VIM", "x_transferred"], "url": "http://www.attrition.org/pipermail/vim/2007-March/001410.html"}, {"name": "novell-bordermanager-isakmp-security-bypass(30218)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30218"}, {"name": "21014", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/21014"}, {"name": "22699", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/22699"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://secure-support.novell.com/KanisaPlatform/Publishing/201/3003139_f.SAL_Public.html"}, {"name": "30338", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/30338"}, {"name": "ADV-2006-4471", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/4471"}, {"name": "1017213", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1017213"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-7155", "datePublished": "2007-03-07T20:00:00", "dateReserved": "2007-03-07T00:00:00", "dateUpdated": "2024-08-07T20:57:39.284Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:novell:bordermanager:3.8:sp4:*:*:*:*:*:*", "matchCriteriaId": "726CF8C6-6C28-4C19-B2C2-88E0B01FEEC1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Novell BorderManager 3.8 SP4 generates the same ISAKMP cookies for the same source IP and port number during the same day, which allows remote attackers to conduct denial of service and replay attacks. NOTE: this issue might be related to CVE-2006-5286."}, {"lang": "es", "value": "Novell BorderManager 3.8 SP4 genera las mismas cookies ISAKMP para la misma IP fuente y n\u00famero de puerto durante el mismo d\u00eda, lo cual permite a atacantes remotos conducir denegaciones de servicio y ataques de respuesta.\r\nNOTA: esta vulnerabilidad podr\u00eda estar referida a CVE-2006-5286."}], "evaluatorSolution": "This vulnerability is addressed in the following vendor document:\r\nhttps://secure-support.novell.com/KanisaPlatform/Publishing/201/3003139_f.SAL_Public.html\r\n", "id": "CVE-2006-7155", "lastModified": "2024-11-21T00:24:31.170", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-03-07T20:19:00.000", "references": [{"source": "[email protected]", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/22699"}, {"source": "[email protected]", "url": "http://securitytracker.com/id?1017213"}, {"source": "[email protected]", "url": "http://www.attrition.org/pipermail/vim/2007-March/001410.html"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://www.osvdb.org/30338"}, {"source": "[email protected]", "url": "http://www.securityfocus.com/bid/21014"}, {"source": "[email protected]", "url": "http://www.vupen.com/english/advisories/2006/4471"}, {"source": "[email protected]", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30218"}, {"source": "[email protected]", "url": "https://secure-support.novell.com/KanisaPlatform/Publishing/201/3003139_f.SAL_Public.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/22699"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1017213"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.attrition.org/pipermail/vim/2007-March/001410.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.osvdb.org/30338"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/21014"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2006/4471"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30218"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://secure-support.novell.com/KanisaPlatform/Publishing/201/3003139_f.SAL_Public.html"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "[email protected]", "type": "Primary"}]}

{}