VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 23, 2006· Updated Jun 16, 2026

CVE-2006-0997

CVE-2006-0997

Description

The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) permits encryption with a NULL key, which results in cleartext communication that allows remote attackers to read an SSL protected session by sniffing network traffic.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Novell/Netware8 versions
    cpe:2.3:o:novell:netware:6.5:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:o:novell:netware:6.5:*:*:*:*:*:*:*
    • cpe:2.3:o:novell:netware:6.5:sp1:*:*:*:*:*:*
    • cpe:2.3:o:novell:netware:6.5:sp1.1a:*:*:*:*:*:*
    • cpe:2.3:o:novell:netware:6.5:sp1.1b:*:*:*:*:*:*
    • cpe:2.3:o:novell:netware:6.5:sp2:*:*:*:*:*:*
    • cpe:2.3:o:novell:netware:6.5:sp3:*:*:*:*:*:*
    • cpe:2.3:o:novell:netware:6.5:sp4:*:*:*:*:*:*
    • (no CPE)range: 6.5
  • Novell/Open Enterprise Server2 versions
    cpe:2.3:o:novell:open_enterprise_server:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:novell:open_enterprise_server:*:*:*:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.