CVE-2006-7155

{"id": "CVE-2006-7155", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2007-03-07T20:19:00.000", "references": [{"url": "http://secunia.com/advisories/22699", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1017213", "source": "cve@mitre.org"}, {"url": "http://www.attrition.org/pipermail/vim/2007-March/001410.html", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/30338", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/21014", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/4471", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30218", "source": "cve@mitre.org"}, {"url": "https://secure-support.novell.com/KanisaPlatform/Publishing/201/3003139_f.SAL_Public.html", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Novell BorderManager 3.8 SP4 generates the same ISAKMP cookies for the same source IP and port number during the same day, which allows remote attackers to conduct denial of service and replay attacks. NOTE: this issue might be related to CVE-2006-5286."}, {"lang": "es", "value": "Novell BorderManager 3.8 SP4 genera las mismas cookies ISAKMP para la misma IP fuente y n\u00famero de puerto durante el mismo d\u00eda, lo cual permite a atacantes remotos conducir denegaciones de servicio y ataques de respuesta.\r\nNOTA: esta vulnerabilidad podr\u00eda estar referida a CVE-2006-5286."}], "lastModified": "2017-07-29T01:29:52.437", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:novell:bordermanager:3.8:sp4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "726CF8C6-6C28-4C19-B2C2-88E0B01FEEC1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org", "evaluatorSolution": "This vulnerability is addressed in the following vendor document:\r\nhttps://secure-support.novell.com/KanisaPlatform/Publishing/201/3003139_f.SAL_Public.html\r\n"}