CVE-2006-0999: Weak Encryption
The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) allows a client to force the server to use weak encryption by stating that a weak cipher is required for client compatibility, which might allow remote attackers to decrypt contents of an SSL protected session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0999?
CVE-2006-0999 is rated as a high severity vulnerability due to its ability to allow remote attackers to weaken the encryption used by the SSL server.
How do I fix CVE-2006-0999?
To fix CVE-2006-0999, you should update your Novell NetWare 6.5 or Novell Open Enterprise Server to the latest patched version.
What software is affected by CVE-2006-0999?
CVE-2006-0999 affects Novell NetWare 6.5 and Novell Open Enterprise Server versions.
Can CVE-2006-0999 lead to data exposure?
Yes, CVE-2006-0999 can potentially allow remote attackers to decrypt sensitive information transmitted over SSL.
Is there a workaround for CVE-2006-0999?
A workaround for CVE-2006-0999 is to disable weak ciphers and enforce strong encryption settings on the SSL server.