What is the severity of CVE-2013-3707?

CVE-2013-3707 is classified as a high-severity vulnerability due to its potential to allow remote attackers to cause a denial of service.

How do I fix CVE-2013-3707?

To mitigate CVE-2013-3707, it is recommended to update the novell-nrm package to version 2.0.2-297.305.302.3 or later.

What kind of attack does CVE-2013-3707 allow?

CVE-2013-3707 allows remote attackers to exploit the vulnerability to cause a denial of service by improperly managing TCP connections.

Is there a workaround for CVE-2013-3707?

There are no known workarounds for CVE-2013-3707 other than applying the appropriate software updates.

Vulnerability/
CVE-2013-3707

medium

4.3

CWE

1/12/2013

6/8/2024

CVE-2013-3707: Input Validation

First published: Sun Dec 01 2013(Updated: )

The HTTPSTK service in the novell-nrm package before 2.0.2-297.305.302.3 in Novell Open Enterprise Server 2 (OES 2) Linux, and OES 11 Linux Gold and SP1, does not make the intended SSL_free and SSL_shutdown calls for the close of a TCP connection, which allows remote attackers to cause a denial of service (service crash) by establishing many TCP connections to port 8009.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Micro Focus Open Enterprise Server	=11.0
Micro Focus Open Enterprise Server	=11.0-sp1

Never miss a vulnerability like this again

Reference Links

http://www.novell.com/support/kb/doc.php?id=7014063

Frequently Asked Questions

What is the severity of CVE-2013-3707?
CVE-2013-3707 is classified as a high-severity vulnerability due to its potential to allow remote attackers to cause a denial of service.
How do I fix CVE-2013-3707?
To mitigate CVE-2013-3707, it is recommended to update the novell-nrm package to version 2.0.2-297.305.302.3 or later.
What systems are affected by CVE-2013-3707?
CVE-2013-3707 affects Novell Open Enterprise Server 2 (OES 2) Linux and OES 11 Linux Gold and SP1 versions.
What kind of attack does CVE-2013-3707 allow?
CVE-2013-3707 allows remote attackers to exploit the vulnerability to cause a denial of service by improperly managing TCP connections.
Is there a workaround for CVE-2013-3707?
There are no known workarounds for CVE-2013-3707 other than applying the appropriate software updates.

agent/type
collector/mitre-cve
source/MITRE
agent/references
agent/weakness
agent/severity
agent/author
agent/last-modified-date
agent/description
agent/first-publish-date
agent/event
agent/source
agent/softwarecombine
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/novell
canonical/micro focus open enterprise server
version/micro focus open enterprise server/11.0
version/micro focus open enterprise server/11.0-sp1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.