CVE-2000-0651

The ClientTrust program in Novell BorderManager does not properly verify the origin of authentication requests, which could allow remote attackers to impersonate another user by replaying the authentication requests and responses from port 3024 of the victim's machine.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:novell:bordermanager:3.0:*:*:*:*:*:*:*
cpe:2.3:a:novell:bordermanager:3.5:*:*:*:*:*:*:*

History

20 Nov 2024, 23:32

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/1440 - Exploit, Patch, Vendor Advisory () http://www.securityfocus.com/bid/1440 - Exploit, Patch, Vendor Advisory
References () http://www.securityfocus.com/templates/archive.pike?list=1&msg=06256915.00591E18.00%40uprrsmtp2.notes.up.com - () http://www.securityfocus.com/templates/archive.pike?list=1&msg=06256915.00591E18.00%40uprrsmtp2.notes.up.com -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/5186 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/5186 -

07 Nov 2023, 01:55

Type Values Removed Values Added
References
  • {'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=06256915.00591E18.00@uprrsmtp2.notes.up.com', 'name': '20000707 Novell Border Manger - Anyone can pose as an authenticated user', 'tags': [], 'refsource': 'BUGTRAQ'}
  • () http://www.securityfocus.com/templates/archive.pike?list=1&msg=06256915.00591E18.00%40uprrsmtp2.notes.up.com -

Information

Published : 2000-07-07 04:00

Updated : 2024-11-20 23:32


NVD link : CVE-2000-0651

Mitre link : CVE-2000-0651

CVE.ORG link : CVE-2000-0651


JSON object : View

Products Affected

novell

  • bordermanager