CVE-2000-0651 Auth bypass in n/a

High 7.5 Published 13 Oct 2000 Updated 8 Aug 2024

Remote attackers can impersonate users by replaying authentication requests in Novell BorderManager ClientTrust, leading to unauthorized access.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2000-0651?

CVE-2000-0651 is a high-severity authentication bypass vulnerability in n/a, published on 13 Oct 2000. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The ClientTrust program in Novell BorderManager does not properly verify the origin of authentication requests, which could allow remote attackers to impersonate another user by replaying the authentication requests and responses from port 3024 of the victim's machine.

Which versions are affected by CVE-2000-0651?

It affects 1 product.

Products include Novell Bordermanager.

How do I fix CVE-2000-0651?

No fix has been published for CVE-2000-0651 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2000-0651 being exploited?

There is no known exploitation of CVE-2000-0651 in the wild and no public exploit code.

Sources

Also known as GHSA-wf72-vr87-m228.