CVE-2006-0998: Novell Netware

Medium severity, CVSS 5.0. EPSS: 3.2% chance of exploitation in the next 30 days.

The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) sometimes selects a weak cipher instead of an available stronger cipher, which makes it easier for remote attackers to sniff and decrypt an SSL protected session.

Affected products

• Novell Netware: version 6.5 only
• Novell Open Enterprise Server: any version

Published 2006-03-23. Last modified 2026-06-16.