CVE-2006-0997
The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server...
The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) permits encryption with a NULL key, which results in cleartext communication that allows remote attackers to read an SSL protected session by sniffing network traffic.
Exploit likelihood
What each source reports
NVD Score used
The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) permits encryption with a NULL key, which results in cleartext communication that allows remote attackers to read an SSL protected session by sniffing network traffic.
- Record
CVE-2006-0997- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) permits encryption with a NULL key, which results in cleartext communication that allows remote attackers to read an SSL protected session by sniffing network traffic.
- Record
CVE-2006-0997- Updated
- 2026-11-02
EUVDEUVD-2006-1000 No score
The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) permits encryption with a NULL key, which results in cleartext communication that allows remote attackers to read an SSL protected session by sniffing network traffic.
- Record
EUVD-2006-1000- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3vc4-357p-hh5q No score
The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server...
The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) permits encryption with a NULL key, which results in cleartext communication that allows remote attackers to read an SSL protected session by sniffing network traffic.
- Record
GHSA-3vc4-357p-hh5q- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-0997 is a medium vulnerability (CVSS 5.0) in Novell Netware, published March 23, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.62%, the 76th percentile. No source names a fixed version.
References
vupen.com/english/advisories/2006/1043
securitytracker.com/id?1015799
support.novell.com/cgi-bin/search/searchtid.cgi?10100633.htm
secunia.com/advisories/19324
exchange.xforce.ibmcloud.com/vulnerabilities/25380
securityfocus.com/bid/17176
osvdb.org/24046
nvd.nist.gov/vuln/detail/CVE-2006-0997
github.com/advisories/GHSA-3vc4-357p-hh5q