返回 CVE 瀏覽器

CVE-2000-0651

HIGH

7.5

CVSS Severity Score

EPSS Score0.0450%

EPSS Percentile18.50th

Published2000年7月7日

Last Modified2026年4月16日

Vulnerability Description

The ClientTrust program in Novell BorderManager does not properly verify the origin of authentication requests, which could allow remote attackers to impersonate another user by replaying the authentication requests and responses from port 3024 of the victim's machine.

Affected Platforms (CPE)

📦

Novell

Bordermanager

= 3.0

📦

Novell

Bordermanager

= 3.5

References & Advisories

🔗 http://www.securityfocus.com/bid/1440

🔗 http://www.securityfocus.com/templates/archive.pike?list=1&msg=06256915.00591E18.00%40uprrsmtp2.notes.up.com

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/5186

🔗 http://www.securityfocus.com/bid/1440

🔗 http://www.securityfocus.com/templates/archive.pike?list=1&msg=06256915.00591E18.00%40uprrsmtp2.notes.up.com

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/5186

相關漏洞威脅

CVE-2007-576710.0

Heap-based buffer overflow in the Client Trust application (clntrust.exe) in Novell BorderManager 3.8 before Update 1.5 allows rem...

CVE-2006-71557.5

Novell BorderManager 3.8 SP4 generates the same ISAKMP cookies for the same source IP and port number during the same day, which a...

CVE-2006-36977.2

Agnitum Outpost Firewall Pro 3.51.759.6511 (462), as used in (1) Lavasoft Personal Firewall 1.0.543.5722 (433) and (2) Novell Bord...

CVE-2001-04865.0

Remote attackers can cause a denial of service in Novell BorderManager 3.6 and earlier by sending TCP SYN flood to port 353.