CVE-2000-0651: High severity novell bordermanager vulnerability

Published Jul 7, 2000

Updated

The ClientTrust program in Novell BorderManager does not properly verify the origin of authentication requests, which could allow remote attackers to impersonate another user by replaying the authentication requests and responses from port 3024 of the victim's machine.

Affected Software

2 affected components

Novell BorderManager=3.0

Novell BorderManager=3.5

Remediation

Patch Available

http://www.securityfocus.com/bid/1440

Event History

Jul 7, 2000

CVE Published

04:00 AM

Oct 13, 2000

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-0651?

CVE-2000-0651 is classified as a high severity vulnerability, as it allows attackers to impersonate users through replay attacks.

How do I fix CVE-2000-0651?

To fix CVE-2000-0651, you should apply the latest patches and updates from Novell for BorderManager versions 3.0 and 3.5.

What versions of Novell BorderManager are affected by CVE-2000-0651?

CVE-2000-0651 affects Novell BorderManager versions 3.0 and 3.5.

What type of attack is possible due to CVE-2000-0651?

CVE-2000-0651 allows for replay attacks, enabling remote attackers to impersonate users.

Is CVE-2000-0651 a local or remote vulnerability?

CVE-2000-0651 is a remote vulnerability, allowing attacks to be carried out over the network.