Novell Bordermanager vulnerabilities

13 CVEs affecting Novell Bordermanager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-5767, published 2007-11-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-5767, published 2007-11-02. High severity, CVSS 10.0. EPSS: 6.8% chance of exploitation in the next 30 days. Heap-based buffer overflow in the Client Trust application (clntrust.exe) in Novell BorderManager 3.8 before Update 1.5 allows remote attackers to execute arbitrary code via a validation request in…
CVE-2000-0152, published 2000-03-30. Medium severity, CVSS 5.0. EPSS: 5.5% chance of exploitation in the next 30 days. Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000.
CVE-2001-0486, published 2001-07-02. Medium severity, CVSS 5.0. EPSS: 5% chance of exploitation in the next 30 days. Remote attackers can cause a denial of service in Novell BorderManager 3.6 and earlier by sending TCP SYN flood to port 353.
CVE-2004-1457, published 2004-12-31. Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days. The Virtual Private Network (VPN) capability in Novell Bordermanager 3.8 allows remote attackers to cause a denial of service (ABEND in IKE.NLM) via a malformed IKE packet, as sent by the Striker…
CVE-2000-0651, published 2000-07-07. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. The ClientTrust program in Novell BorderManager does not properly verify the origin of authentication requests, which could allow remote attackers to impersonate another user by replaying the…
CVE-2006-7155, published 2007-03-07. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. Novell BorderManager 3.8 SP4 generates the same ISAKMP cookies for the same source IP and port number during the same day, which allows remote attackers to conduct denial of service and replay…
CVE-2002-0781, published 2002-08-12. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. RTSP proxy for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a GET request to port 9090 followed by a series of carriage returns, which causes proxy.nlm to…
CVE-2002-0779, published 2002-08-12. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. FTP proxy server for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service (network connectivity loss) via a connection to port 21 with a large amount of random data.
CVE-2002-0780, published 2002-08-12. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. IP/IPX gateway for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a connection to port 8225 with a large amount of random data, which causes ipipxgw.nlm to…
CVE-2002-0782, published 2002-08-12. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. Novell BorderManager 3.5 with PAT (Port-Address Translate) enabled allows remote attackers to cause a denial of service by filling the connection table with a large number of connection requests to…

Latest

CVE-2006-5286, published 2006-10-13. Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days. Unspecified vulnerability in IKE.NLM in Novell BorderManager 3.8 allows attackers to cause a denial of service (crash) via unknown attack vectors related to "VPN issues" for certain "IKE and IPsec…
CVE-2006-1218, published 2006-03-14. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Unspecified vulnerability in the HTTP proxy in Novell BorderManager 3.8 and earlier allows remote attackers to cause a denial of service (CPU consumption and ABEND) via unknown attack vectors related…