CVE-2002-1413

Description

RCONAG6 for Novell Netware SP2, while running RconJ in secure mode, allows remote attackers to bypass authentication using the RconJ "Secure IP" (SSL) option during a connection.

Affected products

• Novell / netware6.0 – 6.0

References

• MISChttp://archives.neohapsis.com/archives/bugtraq/2002-08/0216.html
• MISChttp://support.novell.com/servlet/tidfinder/2963349
• MISChttp://www.kb.cert.org/vuls/id/746251
• MISChttp://www.securityfocus.com/bid/5541
• MISChttp://www.iss.net/security_center/static/9928.php