Description
Novell BorderManager 3.8 SP4 generates the same ISAKMP cookies for the same source IP and port number during the same day, which allows remote attackers to conduct denial of service and replay attacks. NOTE: this issue might be related to CVE-2006-5286.
References
- 20070303 Novell BorderManager ISAKMP issue smells like a dupe mailing-list
- novell-bordermanager-isakmp-security-bypass(30218) vdb-entry
- 21014 vdb-entry
- 22699 third-party-advisory
- https://secure-support.novell.com/KanisaPlatform/Publishing/201/3003139_f.SAL_Public.html
- 30338 vdb-entry
- ADV-2006-4471 vdb-entry
- 1017213 vdb-entry