GCVE - cpe:2.3:o:novell:open_enterprise_server:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:novell:open_enterprise_server:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Novell (`4a1c187d-e568-531f-92b0-685a3df2807c`)
Product	Open Enterprise Server (`a987f71f-dad5-5807-aa59-b3e231f0ec04`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-2770`	not_vulnerable	2026-06-08 05:04:27.825715	Details available The installation functionality in the Novell Kanaka component before 2.8 for Novell Open Enterprise Server (OES) on Mac OS X does not verify the server's X.509 certificate during an SSL session, which allows man-in-the-middle attackers to spoof servers via an arbitrary certificate. Published: 2013-04-07T17:00:00.000Z Updated: 2024-09-17T03:53:38.561Z Open on db.gcve.eu Reference links http://www.novell.com/support/kb/doc.php?id=7011965	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0999`	vulnerable	2026-06-08 04:48:55.929884	Details available The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) allows a client to force the server to use weak encryption by stating that a weak cipher is required for client compatibility, which might allow remote attackers to decrypt contents of an SSL protected session. Published: 2006-03-23T11:00:00.000Z Updated: 2024-08-07T16:56:15.230Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/1043 http://securitytracker.com/id?1015799 http://support.novell.com/cgi-bin/search/searchtid.cgi?10100633.htm https://exchange.xforce.ibmcloud.com/vulnerabilities/25382 http://secunia.com/advisories/19324	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0998`	vulnerable	2026-06-08 04:48:55.929347	Details available The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) sometimes selects a weak cipher instead of an available stronger cipher, which makes it easier for remote attackers to sniff and decrypt an SSL protected session. Published: 2006-03-23T11:00:00.000Z Updated: 2024-08-07T16:56:15.200Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/1043 http://securitytracker.com/id?1015799 http://www.osvdb.org/24047 http://support.novell.com/cgi-bin/search/searchtid.cgi?10100633.htm https://exchange.xforce.ibmcloud.com/vulnerabilities/25381	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0997`	vulnerable	2026-06-08 04:48:55.924392	Details available The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) permits encryption with a NULL key, which results in cleartext communication that allows remote attackers to read an SSL protected session by sniffing network traffic. Published: 2006-03-23T11:00:00.000Z Updated: 2024-08-07T16:56:15.298Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/1043 http://securitytracker.com/id?1015799 http://support.novell.com/cgi-bin/search/searchtid.cgi?10100633.htm http://secunia.com/advisories/19324 https://exchange.xforce.ibmcloud.com/vulnerabilities/25380	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.